Tag: CVE-2025-55182

1 Attack Reports | 1 Vulnerabilities

Attack reports

China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)

Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active exploitation attempts by multiple China state-nexus threat groups, including Earth Lamia and Jackpot Panda. This critical vulnerability in React Server Compone…
exploit
china-nexus
CVE-2025-1338
next.js
earth lamia
CVE-2025-55182
2025-12-05
jackpot panda
state sponsored
react2shell
react server
app router
Published: December 5, 2025
Linked vulnerabilities : CVE-2025-1338 (CVSS 7.3), CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-55182

10.0
    Facebook
  • React Server Components
  • React Server Dom Parcel
  • React Server Dom Turbopack
  • React Server Dom Webpack
Published: December 3, 2025
Click here to see more Vulnerabilities