<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>FluxionNetwork - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/vendors/fluxionnetwork/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Tue, 10 Nov 2026 02:05:07 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/vendors/fluxionnetwork/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>Fluxion: OS Command Injection via Malicious ESSID (CVE-2026-125399)</title><link>https://feed.craftedsignal.io/briefs/2026-11-fluxion-rce/</link><pubDate>Tue, 10 Nov 2026 02:05:07 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-11-fluxion-rce/</guid><description>Fluxion versions before 6.39 contain an OS command injection vulnerability in the fluxion.sh target scanner, allowing attackers within Wi-Fi range to execute commands as root.</description><content:encoded>&lt;p>Fluxion versions before 6.39 contain an OS command injection vulnerability in the fluxion.sh target scanner. The tool decodes access point ESSIDs with eval after only escaping single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the operator scans or selects it.&lt;/p>
</content:encoded><category domain="severity">high</category><category domain="type">advisory</category></item></channel></rss>