🛡️ CVE-2025-55182

The items that name it 11

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas cves2026-10-29
• AI-Powered Espionage Campaign Targets Government Linux Infrastructure
  articleas cves2026-10-15It is written here as CVE-2025-55182 (React2Shell): the attackers deployed a custom Go vulnerability scanner that scans for servers vulnerable to it.

  React2Shell

• Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex
  articleas cves2026-09-30
• Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms
  writeupas cves2026-09-18It is written here as CVE-2025-55182 (react2shell exploitation chain).

  react2shell exploitation chain

• Socket: Next.js Moves to Scheduled Security Releases
  articleas cves2026-07-16

  Pre-authentication remote code execution flaw in React Server Components, CVSS 10.0, exploitable through a single crafted HTTP request. Disclosed December 3. Widespread exploitation observed within days by Google's Threat Intelligence Group; Amazon saw China state-nexus groups exploit it within hour

• Vulnerability Garden
  toolas cves2026-05-13
• Pantheon-Security/medusa
  repoas cves2026-05-10It is written here as CVE-2025-55182 (React2Shell, CVSS 10.0 RCE affecting React Server Components and Next.js).

  React2Shell, CVSS 10.0 RCE affecting React Server Components and Next.js

• Untangling a Linux Incident With an OpenAI Twist (Part 2)
  writeupas cves2026-04-22

  Critical CVSS 10.0 unauthenticated remote code execution vulnerability in the React Server Components Flight protocol

• Tradecraft Tuesday Recap | Huntress
  articleas cves2025-12-23

  Critical React remote code execution vulnerability, referred to as 'React2Shell', undergoing fast-moving active exploitation described as approaching 'Log4Shell' levels

• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
  writeupas cves2025-12-10

  Critical-severity (CVSS 10.0) unauthenticated remote code execution vulnerability in React Server Components, publicly disclosed December 3. Dubbed 'React2Shell'. Exists due to insecure deserialization in how React Server Components handle payload logic (React Flight protocol Chunk/thenable handling

• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas classification.key entities