Meta React Server Components Remote Code Execution Vulnerability

Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with...

Exploit for CVE-2025-55182

CVE-2025-55182 - Dockerized Proof of Concept This repository...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner React2Shell A community tool to dete...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner Fast, concurrent vulnerability scanner...

Exploit for CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC pour la vuln de deserialis...

Exploit for CVE-2025-55182

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scann...

Imperva Customers Protected Against React Server Components (RSC) Vulnerability

Overview On December 3, 2025, the React and Next.js teams disclosed a critical security vulnerability CVSS 10.0, identified as React2Shell, affecting applications that leverage React Server Components together with Server Actions or Server Functions. The React2Shell vulnerability stems from...

Exploit for CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python C...

Exploit for CVE-2025-55182

CVE-2025-55182: Critical Pre-Authentication RCE in React Serve...

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

Overview Update 1: As of 4:30 PM Eastern, December 4, 2025, Rapid7 has validated that a working weaponizedproof-of-concept exploit ,shared by researcher@maple3142 , is now publicly available. Update 2: On December 5, 2025,Lachlan Davidson who discovered the vulnerability has also published...

CVE-2025-55182

A flaw was found in the React Server Components RSC protocol in which an attacker could send a malicious package to a Server Function endpoint and cause unauthenticated remote code execution. This is possible due to the way the affected packages deserialized untrusted data...

Exploit for CVE-2025-55182

CVE-2025-55182 Check for the critical RCE vulnerability i...

Exploit for CVE-2025-55182

🔍 Phoenix SCA Scanner - Universal - Version for CVE-2025-55182...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Exploit for CVE-2025-55182

CVE-2025-55182 React2Shell Detection Tool Detection tools for...

Wallarm Halts Remote Code Execution Exploits: Defense for Vulnerable React Server Component Workflows

On December 3, 2025, React maintainers disclosed a critical unauthenticated remote code execution RCE vulnerability in React Server Components RSC, tracked as CVE-2025-55182. A working PoC was released publicly, and Wallarm immediately began observing widespread exploitation attempts across...

Exploit for CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of...

Exploit for CVE-2025-55182

react2shell-scanner A command-line tool for detecting CVE-202...

Exploit for CVE-2025-55182

CVE-2025-55182 – React Server Components RCE Proof of Conce...

Remote Code Execution (RCE)

React Server Components are vulnerable to Remote Code Execution RCE. The vulnerability is due to the unsafe deserialization of attacker-controlled payloads sent to Server Function endpoints, which allows an attacker to execute arbitrary code without authentication...