Exploitation of Critical Vulnerability in React Server Components (Updated December 8)

State-linked groups target critical vulnerability in React Server Components

Researchers warn that critical vulnerabilities in Meta’s React Server Components and Next.js are under threat from botnets and state-linked adversaries.  China-nexus threat groups, tracked as Earth Lamia and Jackpot Panda, attempted to exploit a vulnerability tracked as CVE-2025-55182 in React, within a few hours of the flaw being disclosed, according to a blog post by [… The post State-linked groups target critical vulnerability in React Server…

Exploitation of Critical Vulnerability in React Server Components (Updated December 8)

We discuss the CVSS 10.0-rated RCE vulnerability in the Flight protocol used by React Server Components. This is tracked as CVE-2025-55182. The post Exploitation of Critical Vulnerability in React Server Components (Updated December 8) appeared first on Unit 42. This article has been indexed from Unit 42 Read the original article: Exploitation of Critical Vulnerability in React Server Components (Updated December 8) The post Exploitation of Cr…

Chinese Hackers Exploit Critical React RCE Flaw Hours After Disclosure

The Swift Strike: Chinese Hackers Exploit React2Shell Flaw in Record Time In the fast-paced world of cybersecurity, vulnerabilities can emerge and be weaponized with alarming speed, but few incidents illustrate this more starkly than the recent exploitation of the React2Shell remote code execution flaw. Disclosed just days ago, this critical vulnerability in React Server Components has already been targeted by sophisticated threat actors linked …

Update On React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478) — API Security - Cybernoz - Cybersecurity News

The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing attack activity. This update summarizes the changes and observations we have made across Wallarm customers. The First PoC Exploit Was Not Real Soon after th…

RCE Vulnerability in React Server Components & Next.js

Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your …