CVE-2025-55182

CVSS

—

EPSS

0.998 (100.0th percentile)

CISA KEV

Added 2025-12-05, due 2025-12-12

Exploitation

No report

Public exploits

458 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 95Huntress10 Dec 2025, 05:00

  PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

  Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.

  ↗huntress.com/blog/peerblight-linux-backdoor-exp…(opens the publisher's site in a new tab)
• 

  ● Actively exploitedCritical 95Wiz Research08 Dec 2025, 17:18

  React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

  We break down the exploit mechanics and detail active in-the-wild attacks observed by our team, from credential harvesting to sophisticated cloud backdoors.

  ↗wiz.io/blog/nextjs-cve-2025-55182-react2shell-d…(opens the publisher's site in a new tab)

• ● Actively exploitedCritical 95Vercel (blog + changelog)05 Dec 2025, 13:00

  React2Shell Security Bulletin

  CVE-2025-55182 is a critical vulnerability in React that requires immediate action. Next.js and other frameworks that React are affected. Read the bulletin and act now. Read more

  ↗vercel.com/blog/resources-for-protecting-agains…(opens the publisher's site in a new tab)
• 

  ● Actively exploitedCritical 95Wiz Research03 Dec 2025, 15:57

  React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability

  Detect and mitigate React2Shell (CVE-2025-55182), critical RCE vulnerability in React and Next.js exploited in the wild. Organizations should patch urgently.

  ↗wiz.io/blog/critical-vulnerability-in-react-cve…(opens the publisher's site in a new tab)

• ● Actively exploitedCritical 95Vercel (blog + changelog)03 Dec 2025, 13:00

  Summary of CVE-2025-55182

  See the for the latest updates. React2Shell security bulletin Summary Impact Resolution Credit References CVE-2025-55182 CVE-2025-66478 A critical-severity vulnerability in React Server Components () affects React 19 and frameworks that use it, including Next.js (). Under certain conditions…

  ↗vercel.com/changelog/cve-2025-55182(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:37poc publishedpoc-in-github
2. 24 Sept, 12:18poc publishedpoc-in-github
3. 24 Sept, 11:55poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev