Thehackernews

CISA Adds React2Shell Vulnerability to KEV Catalog Amid Active Exploitation

First seen 8 Dec 2025, 12:51 UTC • Thehackernews

•45.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Cybersecurity and Infrastructure Security Agency (CISA) has added the critical React2Shell vulnerability to its Known Exploited Vulnerabilities (KEV) catalog following confirmed active exploitation. This vulnerability poses risks to various cloud environments, affecting organizations that utilize React-based applications.

How this analysis works

Continue Reading

Critical React2Shell RCE Vulnerability Exploited in the Wild RondoDox Botnet Targets React2Shell Flaw to Spread Malware Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation AWS Warns of Data Exfiltration Risks from Outbound Traffic Blind Spots ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos

CISA Adds React2Shell Vulnerability to KEV Catalog Amid Active Exploitation

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading