Fortinet Fortitoken Mobile — known CVE vulnerabilities

Every CVE whose affected-product data names Fortinet Fortitoken Mobile, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-22131 — CVSS 6.4 (medium): A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS…
• CVE-2026-44279 — CVSS 5.5 (medium): An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1…
• CVE-2021-44166 — CVSS 4.1 (medium): An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a…