{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/fluxionnetwork/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8,"id":"CVE-2026-125399"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CEC802B9-223C-507F-A9B2-DA338AA89C93\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":[],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FluxionNetwork"],"content_html":"\u003cp\u003eFluxion versions before 6.39 contain an OS command injection vulnerability in the fluxion.sh target scanner. The tool decodes access point ESSIDs with eval after only escaping single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the operator scans or selects it.\u003c/p\u003e\n","date_modified":"2026-11-10T09:37:32Z","date_published":"2026-11-10T02:05:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fluxion-rce/","summary":"Fluxion versions before 6.39 contain an OS command injection vulnerability in the fluxion.sh target scanner, allowing attackers within Wi-Fi range to execute commands as root.","title":"Fluxion: OS Command Injection via Malicious ESSID (CVE-2026-125399)","url":"https://feed.craftedsignal.io/briefs/2026-11-fluxion-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - FluxionNetwork","version":"https://jsonfeed.org/version/1.1"}