PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

slcyber.io | vulnerability | CVE-2025-55182 | #rce | #vulnerability-research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Assetnote develops a high-fidelity detection mechanism for the Next.js RSC RCE vulnerability chain — CVE-2025-55182 and CVE-2025-66478.
CVE
CVE-2025-55182
Published
Collected

Related coverage

Critical · vulnerability · xbow.com
React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond
Covers React2Shell (CVE-2025-55182), an unauthenticated RCE in React Server Components' serialization that also affects Next.js and more, and how to quickly scope exposure.
Critical · vulnerability · hackerone.com
CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites
A critical CVE-2025-55182 React RCE flaw affects millions of sites. Get impact details, affected versions, indicators of compromise, and urgent remediation steps.
Critical · vulnerability · bugcrowd.com
CVE-2025-55182: What you need to know about React2Shell
The React team disclosed CVE-2025-55182, an unauthenticated RCE in React Server Components used by Next.js. Bugcrowd has activated priority triage for related submissions.
vulnerability · wiz.io
Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert
Wiz adds Validated External Risk Issues: SOC-level alerts for externally verified attack paths, shown via React2Shell (CVE-2025-55182/66478), where half of exposed customers showed compromise signs.
Critical · vulnerability · hunt.io
React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App
A log-level reconstruction of CVE-2025-55182 (React2Shell) on a live Next.js app: RCE via the RSC Flight protocol, 12,440 logs, four C2 servers—though a stripped container blocked later stages.
vulnerability · wiz.io
React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182
Wiz details CVE-2025-55182 exploit mechanics—insecure deserialization in React Server Components—and maps in-the-wild attacks from cryptomining and credential harvesting to Sliver backdoors.
Back