React2Shell Vulnerabilities Exploited by Threat Actors

React2Shell Vulnerabilities Exploited by Threat Actors

First seen 12 Dec 2025, 18:53 UTC •Blog.CloudflareSecurityboulevard •29.2

Article Content

Browse articles
ThreatCluster

Two new vulnerabilities in React, known as React2Shell, have been identified, allowing hackers to exploit Server Functions through malicious HTTP requests. Security teams are currently addressing these issues as threat actors have rapidly integrated these vulnerabilities into their scanning routines.

How this analysis works

Extracted Entities

1 / 2