mobile-next mobile-mcp

• CVE-2026-35394 High 8.3 Mobile Next has Arbitrary Android Intent Execution via mobile_open_url 0.4%
• CVE-2026-33989 High 8.1 @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools 0.5%