Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components RSC within hours of it becoming public knowledge. The vulnerability in question is CVE-2025-55182 CVSS score: 10.0, aka React2Shell, which allows unauthenticated remot...

Exploit for CVE-2025-55182

React2Shell – Critical Remote Code Execution in React Server C...

Exploit for CVE-2025-55182

React2Shell – Critical Remote Code Execution in React Server C...

Exploit for CVE-2025-55182

I. Overview of the Vulnerability In recent days, there have b...

Vulnerabilities fixed in React Server Components

React has fixed vulnerabilities in certain versions of React Server Components specifically for versions 19.0.0, 19.1.0, 19.1.1 and 19.2.0. An unauthenticated attacker can send a rogue HTTP request to any Server Function endpoint that, when processed by React, can lead to remote code execution on...

Exploit for CVE-2025-55182

CVE-2025-55182 This repository provides a minimal intentional...

Exploit for CVE-2025-55182

🚨 CVE-2025-55182 "React2Shell" — Critical RCE in React Server...

Exploit for CVE-2025-55182

React2Shell: RCE 0-day in React Server Components CVE-2025-5...

Exploit for CVE-2025-55182

CVE-2025-55182 Attack Analysis: React Server Components RCE...

Exploit for CVE-2025-55182

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a cri...

Exploit for CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

Exploit for CVE-2025-55182

React2Shell Scanner High Fidelity Detection & Exploitation To...

Exploit for CVE-2025-55182

CVE-2025-55182 – React Server Components RCE Exploit Fixed Mult...

Exploit for CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of...

Exploit for CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit v2.0 A c...

Exploit for CVE-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehens...

Meta React Server Components Remote Code Execution Vulnerability

Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with...

React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 Remote Code Execution (React2Shell)

Binary data reactCVE-2025-55182.nbin...

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

CVE-2025-55182 is a critical CVSS 10.0 pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks see the context section for a more exhaustive list of affected frameworks...