CVE-2025-55182 (React2Shell) disclosed by React Security Advisory in December 2025

The React Security Advisory disclosed CVE-2025-55182, codenamed React2Shell, on December 3, 2025.

Published 19sem1 sourceupdated 3sem

≈ 18sSpeed

The fact

This critical vulnerability, rated CVSS 10.0, enables arbitrary code execution via a specially crafted HTTP request.

No authentication is required to exploit the flaw.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on April 24, 2026