PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

T1Critical 95Covered by 1 source · first reported by Huntress at 10 Dec 2025, 05:00 UTC

Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.

security

Sources

• T1PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182Huntress10 Dec 2025, 05:00

Vulnerabilities

• CVE-2025-55182