CVE-2026-105793 - Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`
CVE ID :CVE-2026-105793 Published : Oct. 6, 2026, 2:12 p.m. | 1 hour, 16 minutes ago Description :Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a...