Incident · Resolved
React2Shell
Meta React Server Components · 3 stories since DEC 3
- 3
- stories
- 2
- CVEs
- JAN 7
- latest
How it unfolded
Decipher story Event
- 2 CVEs published
- Critical Flaw CVE-2025-55182 Affects React Server Components
- CVE-2025-55182 added to CISA KEV
- Broad Exploit Activity Targets React2Shell Flaw
- Federal patch deadline
- React2Shell Attacks Continue to Build
The story so far
React2Shell (CVE-2025-55182) is a critical flaw in React Server Components that lets an attacker run code on the server without logging in, and any app that supports Server Components can be vulnerable. Exploitation began almost as soon as it was disclosed on Dec. 3, 2025, from opportunistic botnets to APT groups. By January, GreyNoise had logged more than 8 million attack sessions.
Written by the editors