Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent system without any scheme validation, allowing execution of arbitrary Android intents, including USSD codes, phone calls, SMS messages, and content provider access. This vulnerability is fixed in 0.0.50.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 4 | Disclosure1PoC3 |
| 2026-07-16 | 1 | Disclosure1 |
My findings: CVE-2026-6942 (radare2-mcp, CVSS 9.8), CVE-2026-42449 (n8n-mcp, CVSS 8.5), CVE-2026-35394 (mobile-mcp, CVSS 8.3). Plus issues in GitHub MCP, Kubernetes MCP, IDA Pro MCP, Chromium DevTools MCP, and AWS Diagram MCP.
Post summary
The post enumerates several new high‑CVSS vulnerabilities across various MCPs and notes additional MCP issues in popular platforms.
We aren't phishing humans anymore. We're phishing AI agents. 🚨 My first satisfying CVE drop: CVE-2026-35394 (CVSS 8.3) in mobile-mcp. I found a prompt injection that turns an AI assistant into a universal remote for Android. One malicious document, zero clicks. 🧵👇 https://t.co/1B1eTTq5xl
Post summary
The author discloses CVE‑2026‑35394, presenting a prompt injection PoC that turns an AI assistant into a universal remote for Android, but provides no evidence of real‑world exploitation or mitigation.
I found this bug while fuzzing MCP servers with mcpsec, an open-source security scanner I'm building for AI agent protocols. The attack surface is shifting. Test your servers: pip install mcpsec Full technical deep-dive and payloads here: https://medium.com/@manthan27ghasadiya/cve-2026-35394-pwning-androids-via-ai-prompt-injection-bae9b7ff9654 #cybersecurity #PromptInjection #CVE #InfoSec #VulnerabilityResearch
Post summary
The post announces a Proof of Concept for CVE‑2026‑35394 with technical depth and payloads provided via a Medium article, but it does not report active exploitation or a patch.
CVE-2026-35394 Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Andr… https://www.cve.org/CVERecord?id=CVE-2026-35394
Post summary
The CVE-2026-35394 entry describes a flaw where Mobile Next’s mobile_open_url tool passes user‑supplied URLs directly to Android prior to version 0.0.50, potentially enabling exploitation, but no PoC, exploit, patch, or active use details are provided.
"CVE-2026-35394: Pwning Androids via AI Prompt Injection" by Manthan Ghasadiya #BugBounty #Cybersecurity #Hacking #InfoSec https://medium.com/@manthan27ghasadiya/cve-2026-35394-pwning-androids-via-ai-prompt-injection-bae9b7ff9654
Post summary
The post announces CVE-2026-35394 and links to a Medium article that presumably shares a Proof of Concept for exploiting Android devices via AI prompt injection, with no additional technical, patch, or active exploitation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mobilenexthq | mobile_mcp | - | node.js | - |