Exploit / PoCcriticalExploited in the wild

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

The Hacker Newsby @TheHackersNewsDec 15, 2025 · 00:00 UTC (Dec 15, 2025)3 min read1

Read at thehackernews.com

Analyze CVE-2025-55182 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-55182 CVE-2021-44228

Tags: cve-2025-55182 cve-2021-44228 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2025-55182	Unauthenticated RCE in React Server Components (React2Shell)	10.0	100%	KEVRansomwarePoC ×14	Dec 3, 2025 KEV Dec 5, 2025

From the original article

3 min read at thehackernews.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to patch the recent React2Shell vulnerability by December 12, 2025, amid reports of widespread exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.