CVE-2026-119346

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 8, 2026

Last Seen

November 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical React Server Components Vulnerability Enables Remote Code Execution70.5

A critical vulnerability, tracked as GHSA-xqc2-xf4c-x3h3, was disclosed on October 14, 2026, affecting React Server Components. This flaw allows unauthenticated attackers to execute remote code on servers using vulnerable versions of react-server-dom-webpack, react-server-dom-parcel, and react-serve...