Attackers Exploiting React2Shell Vulnerability to Attack IT Sectors

Cybersecuritynews •Tushar Subhra Dutta • January 27, 2026

Threat actors have started targeting companies in the insurance, e-commerce, and IT sectors through a critical vulnerability tracked as CVE-2025-55182, commonly known as React2Shell. This flaw exists in the Flight protocol that handles client-server communication for React Server Components, allowing attackers to run unauthorized code on vulnerable servers. The vulnerability originates from insecure deserialization, where […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Attackers Exploit React2Shell Vulnerability in IT and E-commerce Sectors Threat actors are exploiting a critical vulnerability known as React2Shell (CVE-2025-55182) to target companies in the insurance, e-commerce, and IT sectors. This vulnerability arises from insecure deserialization in the Flight protocol used for React Server Components, allowing unauthorized code execution on affected servers. 2 sources 30

Extracted Entities

Attackers Exploiting React2Shell Vulnerability to Attack IT Sectors

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Malware (1)