Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond

xbow.com | vulnerability | Critical | Actively exploited | CVE-2025-55182 | #rce | #web-security | #react2shell | #nextjs | #cve-2025-55182 | #react

Summary

Covers React2Shell (CVE-2025-55182), an unauthenticated RCE in React Server Components' serialization that also affects Next.js and more, and how to quickly scope exposure.
CVSS
10
Published
Collected

original ↗

Related coverage

  1. React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App (hunt.io)
  2. Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert (wiz.io)
  3. CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites (hackerone.com)
  4. CVE-2025-55182: What you need to know about React2Shell (bugcrowd.com)
  5. React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability (wiz.io)
  6. React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 (wiz.io)

back