Back Cybersecuritynews

ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload

Cybersecuritynews •Tushar Subhra Dutta • February 10, 2026

The cybersecurity sector has been impacted by the sudden appearance of “React2Shell” (CVE-2025-55182), a critical vulnerability affecting .js and React Server Components. Following its public disclosure on December 4, 2025, threat actors mobilized with alarming speed, launching exploitation attempts against internet-facing systems within just 20 hours. The flaw allows unauthenticated attackers to execute arbitrary code […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ILOVEPOOP Toolkit Targets React2Shell Vulnerability for Exploitation The ILOVEPOOP toolkit is exploiting the React2Shell vulnerability (CVE-2025-55182), which affects .js and React Server Components. This critical flaw allows unauthenticated attackers to execute arbitrary code by manipulating the serialization process of server components. Following its public disclosure on December 4, 2025, threat actors initiated exploitation attempts within 20 hours against internet-facing systems. 3 sources 24

Extracted Entities

ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Malware (1)

MITRE ATT&CK (1)

Tools (1)