10
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server — no credentials, no prior access needed. / / / /|...
Basic Information
ID
50EDCE34-DAEB-5E91-BC63-D438DAB812DA
Published
May 24, 2026 at 00:29
Modified
May 24, 2026 at 00:41