{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js · updates",
  "home_page_url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182",
  "feed_url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182/feed.json",
  "description": "A flaw in how React Server Components deserialize Flight payloads let an unauthenticated request run code on the server. Next.js App Router apps were affected by default. China-nexus groups including Earth Lamia and Jackpot Panda exploited it within hours of disclosure. CVE-2025-66478 (the Next.js id) was rejected as a duplicate.",
  "language": "en",
  "_pwn": {
    "slug": "react2shell-react-server-components-cve-2025-55182",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182/feed.xml",
    "llms": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182/llms.txt",
    "json": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-12-149dc090",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-12-149dc090",
      "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: Unit 42 updates its threat brief on ongoing exploitation",
      "content_text": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: Unit 42 updates its threat brief on ongoing exploitation\n\nSource: https://unit42.paloaltonetworks.com/cve-2025-55182-react-and-cve-2025-66478-next/",
      "date_published": "2025-12-12T00:00:00.000Z",
      "external_url": "https://unit42.paloaltonetworks.com/cve-2025-55182-react-and-cve-2025-66478-next/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-05-57549a91",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-05-57549a91",
      "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: CISA adds CVE-2025-55182 to KEV",
      "content_text": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: CISA adds CVE-2025-55182 to KEV",
      "date_published": "2025-12-05T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-03-f5502a7e",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-03-f5502a7e",
      "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: React discloses a critical vulnerability in React Server Components and ships fixes",
      "content_text": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: React discloses a critical vulnerability in React Server Components and ships fixes\n\nSource: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components",
      "date_published": "2025-12-03T00:00:00.000Z",
      "external_url": "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-03-7a67c5d2",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182#2025-12-03-7a67c5d2",
      "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js: AWS sees China-nexus groups exploiting it within hours",
      "content_text": "Including Earth Lamia and Jackpot Panda.\n\nSource: https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/",
      "date_published": "2025-12-03T00:00:00.000Z",
      "external_url": "https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/",
      "tags": [
        "critical"
      ]
    }
  ]
}