VulnerabilitycriticalExploited in the wild

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

The Hacker Newsby @TheHackersNewsDec 5, 2025 · 16:12 UTC (Dec 5, 2025)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2025-55182 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-55182 CVE-2025-31324 CVE-2025-1338

Tags: cve-2025-55182 cve-2025-31324 cve-2025-1338 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-1338	Remote Command Injection in NUUO Camera Web Interface	6.9	51%		Feb 16, 2025
CVE-2025-31324	Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer	9.8	99%	KEVRansomwarePoC	Apr 24, 2025 KEV Apr 29, 2025
CVE-2025-55182	Unauthenticated RCE in React Server Components (React2Shell)	10.0	100%	KEVRansomwarePoC ×13	Dec 3, 2025 KEV Dec 5, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Dec 05, 2025 Vulnerability / Software Security Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components (RSC) within hours of it becoming public knowledge. The vulnerability in question is CVE-2025-55182 (CVSS score: 10. 0), aka React2Shell , which allows unauthenticated remote code execution .

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.