Fortinet Fortitoken Mobile vulnerabilities

3 CVEs affecting Fortinet Fortitoken Mobile, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44279, published 2026-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44166, published 2022-03-02. Medium severity, CVSS 4.1. EPSS: 0.7% chance of exploitation in the next 30 days. An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to…
CVE-2021-22131, published 2022-07-18. Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days. A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3…
CVE-2026-44279, published 2026-05-12. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow…