CVE-2025-66478

—

CVSS

—

EPSS

—

Published

Dec 3, 2025 (Dec 3, 2025)

Modified

Dec 3, 2025

Description

Rejected reason: This CVE is a duplicate of CVE-2025-55182.

NVD CVE.org GitHub PoCs EPSS (—)

In the news7 stories

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

The Bug That Won't Die: 10 Years of the Same Mistake

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Exploit / PoC CVE-2025-55182 CVE-2025-66478 CVE-2015-4852

60

Attackers hit React defect as researchers quibble over proof

CyberScoopDec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182 CVE-2025-66478

60

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

The Hacker NewsDec 4, 15:38 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182)

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

Developers scramble as critical React flaw threatens major apps

CyberScoopDec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-66478

60

Admins and defenders gird themselves against maximum

Ars Technica · SecurityDec 3, 23:16 UTC · Dec 3, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

47