Technology ❯ Cybersecurity ❯ Vulnerabilities ❯ Remote Code Execution

CVE-2025-55182

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

Urgent patching remains the primary defense for internet-facing apps built on React Server Components.

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections