Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

wiz.io | research | CVE-2025-55182

Summary

A technical deep dive into React2Shell (CVE-2025-55182): deserialization bugs, gadget-chains, framework-wide impact, and real-world exploitation data.
Published
Collected

original ↗

Related coverage

  1. Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert (wiz.io)
  2. React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability (wiz.io)
  3. React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond (xbow.com)
  4. CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites (hackerone.com)
  5. CVE-2025-55182: What you need to know about React2Shell (bugcrowd.com)
  6. React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App (hunt.io)

back