Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED

jfrog.com | vulnerability | #rce | #vulnerability | #react2shell | #nextjs | #cve-2025-55182 | #cve-2025-66478 | #react

Summary

JFrog's living advisory on React2Shell (CVE-2025-55182 / CVE-2025-66478): a near-100%-success RCE in React Server Functions and Next.js, now with public exploits, plus follow-on DoS fixes.
Published
Collected

original ↗

Related coverage

  1. React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond (xbow.com)
  2. How to detect React2Shell with Burp Suite (portswigger.net)
  3. React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell (aikido.dev)
  4. React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App (hunt.io)
  5. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  6. Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert (wiz.io)

back