CVE-2025-66478

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 3, 2025

Last Seen

October 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Meta React Server Components Discovered70.5

CVE-2025-55182 is a critical remote code execution vulnerability in Meta React Server Components, with a CVSS score of 10.0. It allows unauthenticated attackers to execute arbitrary commands on the server by sending crafted JSON payloads. This vulnerability was added to CISA's Known Exploited Vulner...

Critical CVSS 10.0 Vulnerability in React & Next.js Requires Immediate Patch62.9

A critical vulnerability with a CVSS score of 10.0 has been identified in React Server Components, specifically affecting the Flight protocol. This flaw allows unauthenticated attackers to execute remote code, impacting applications built with React and Next.js. Users are urged to apply patches imme...

Critical React Flaw CVE-2025-55182 Exposes Major Security Risks62.0

A maximum-severity vulnerability in the React JavaScript library, tracked as CVE-2025-55182, allows unauthenticated remote code execution on affected instances. Security researchers report that 39 percent of cloud environments are vulnerable, and exploitation is expected to occur imminently. Develop...

Burp Suite Enhances Scanner for React2Shell Vulnerabilities50.9

Burp Suite has upgraded its scanning capabilities to detect critical React2Shell vulnerabilities in JavaScript applications. Both editions of Burp Suite now include the latest detection logic, allowing users to validate their exposure and perform automated scans effectively.

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (7)

1 / 2

Related Entities

Zero-day Exploit Remote Code Execution Malware Data Breach DDoS Vercel Alibaba Cloud Meta React2Shell PCPcat React.py T1190 - Exploit Public-Facing Application

CVE-2025-66478

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (7)

Critical RCE Vulnerability in Meta React Server Components Discovered

Critical CVSS 10.0 Vulnerability in React & Next.js Requires Immediate Patch

Critical React Flaw CVE-2025-55182 Exposes Major Security Risks

Burp Suite Enhances Scanner for React2Shell Vulnerabilities

Operation PCPcat Compromises Over 59,000 Next.js/React Servers

PCPcat Malware Compromises Over 59,000 Servers via React2Shell Exploit

0G Foundation Breached via Vulnerability Exploit

Related Articles (17)

What Is CVE-2025-55182 (Meta React Server Components Remote Code Execution)?

React2Shell (CVSS 10.0): Patch React & Next.js NOW | Unauth RCE Explained

Operation PCPcat Hacked 59,000+ Next.js/React Servers Within 48 Hours

New PCPcat Exploiting React2Shell Vulnerability to compromise 59,000+ Servers

0G Foundation Targeted in Attack Exploiting Vulnerability

How to detect React2Shell with Burp Suite

CVE-2025-55182 vulnerability in React and Next.js

Maximum severity React vulnerability threatens extensive compromise

React2Shell: RCE Vulnerabilities Require Immediate Attention

Critical React, Next.js flaw lets hackers execute code on servers

Critical vulnerabilities found in React and Next.js

CC-4723

Responding to CVE-2025-55182

'Exploitation is imminent' of max-severity React bug

'Exploitation is imminent' of max-severity React bug

'Exploitation is imminent' as 39 percent of cloud environs have max

Developers scramble as critical React flaw threatens major apps

Related Entities