#CVE-2025-55182

Vulnerability/Target

2025-12-08 • EtherRAT: DPRK uses novel Ethereum implant in React2Shell attacks

React Server Components 19.0.0, 19.1.0, 19.1.1, and 19.2.0 contain a pre-authentication remote-code-execution vulnerability in react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.

https://www.cve.org/CVERecord?id=CVE-2025-55182

Tagged Reports

2026-06-03
Qihoo360
#APT-C-26 #CVE-2025-55182 #T1406 #Copperhedge
2025-12-16
Sysdig
#CVE-2025-55182 #EtherRAT #React2Shell #Suspicious
2025-12-08
Sysdig
#CVE-2025-55182 #EtherRAT #React2Shell #Suspicious
« Back