---
id: 5197
title: "React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond"
cve: CVE-2025-55182
cvss: 10
severity: critical
source_domain: xbow.com
source_url: "https://xbow.com/blog/react2shell-cve-2025-55182-a-wake-up-call-for-modern-web-security"
published_at: "2025-12-05T13:00:00Z"
tags: ["rce", "web-security", "react2shell", "nextjs", "cve-2025-55182", "react"]
phying_url: "https://phying.com/item/5197"
lang: en
---

# React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond

## Summary

Covers React2Shell (CVE-2025-55182), an unauthenticated RCE in React Server Components' serialization that also affects Next.js and more, and how to quickly scope exposure.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2025-55182
- **CVSS:** 10
- **Published:** 2025-12-05T13:00:00Z
- **Original:** https://xbow.com/blog/react2shell-cve-2025-55182-a-wake-up-call-for-modern-web-security
- **Phying News:** https://phying.com/item/5197