React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability

T1Critical 95Covered by 1 source · first reported by Wiz Research at 03 Dec 2025, 15:57 UTC

Detect and mitigate React2Shell (CVE-2025-55182), critical RCE vulnerability in React and Next.js exploited in the wild. Organizations should patch urgently.

security

Sources

T1React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React VulnerabilityWiz Research03 Dec 2025, 15:57

Vulnerabilities

CVE-2025-55182

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 7 days to remediate	15
kev ransomware	10
public poc — 458 repositories	20