6 matches found
EUVD-2026-120562
Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the...
CVE-2026-125399
Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the...
CVE-2026-125399: FluxionNetwork fluxion: Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes…
Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the...
CVE-2026-125399 Fluxion before 6.39 OS Command Injection via Crafted SSID
Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the...
CVE-2026-125399
Versions of Fluxion before 6.39 are vulnerable to an OS command injection (CWE-78) in the fluxion.sh target scanner. The root cause is improper input validation of untrusted 802.11 SSID data (CWE-20); the application uses eval() to decode non-ASCII characters in ESSIDs but fails to account for ba...
PT-2026-141222
Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID to execute commands as root when the...