All 2 CVE vulnerabilities found in mobile-mcp, with AI-generated Chinese analysis, references, and POCs.
Vendor: mobile-next
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-35394 | Mobile Next has Arbitrary Android Intent Execution via mobile_open_url CWE-939 | 8.3 | High | 2026-04-06 |
| CVE-2026-33989 | @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools CWE-22 | 8.1 | High | 2026-03-27 |
All 2 known CVE vulnerabilities affecting mobile-mcp with full Chinese analysis, references, and POCs where available.