Back Cybersecuritynews

Hackers Exploiting React Server Components Vulnerability in the Wild to Deploy Malicious Payloads

Cybersecuritynews •Guru Baran • February 4, 2026

Two months following the disclosure of CVE-2025-55182, exploitation activity targeting React Server Components has evolved from broad scanning into consolidated, high-volume attack campaigns. According to telemetry from GreyNoise collected between January 26 and February 2, 2026, threat actors are actively leveraging this critical vulnerability to deploy cryptominers and establish persistent remote access. While the total […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit React Native Metro Vulnerability to Target Developers Hackers are exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native, affecting developers on Windows, Linux, and macOS. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands on Windows and run arbitrary executables on Linux and macOS with limited control. This poses a significant risk to development environments using React Native. 14 sources 57

Extracted Entities

Hackers Exploiting React Server Components Vulnerability in the Wild to Deploy Malicious Payloads

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)