Skip to content

View in the app

A better way to browse. Learn more.

hosang I.T.

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS

Tap the Share icon in Safari
Scroll the menu and tap Add to Home Screen.
Tap Add in the top-right corner.

To install this app on Android

Tap the 3-dot menu (⋮) in the top-right corner of the browser.
Tap Add to Home screen or Install app.
Confirm by tapping Install.

hosang I.T.

hosang I.T.

hosang I.T.

hosang I.T.

Sign In

Email Address

Password

Remember me
Not recommended on shared computers

Forgot your password?
Sign Up

CVE-2025-55182: Critical Vulnerability, React2Shell, Allows for Unauthenticated RCE

CVE-2025-55182: Critical Vulnerability, React2Shell, Allows for Unauthenticated RCE

Cybereason is continuing to investigate. Check the Cybereason blog for additional updates.

KEY TAKEAWAYS

Critical vulnerability discovered on December 3, 2025 in React that could allow for unauthenticated remote code execution.
Cybereason experts have dubbed this vulnerability as trivial to exploit.
Issue allows the server to incorrectly trust user-supplied identifiers and fails to verify.
Initial working proof of concept is public and attributed to Chinese threat actors.
If server was exposed to public internet prior to patch release date (December 3, 2025), investigate for signs of compromise.
Update to latest patched versions of React, and review advisory for additional recommendations.

View the full article

User Feedback

Recommended Comments

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Where:

Search:

Date Created:

Use:

Last Updated:

Chrome (Android)

Tap the lock icon next to the address bar.
Tap Permissions → Notifications.
Adjust your preference.

Chrome (Desktop)

Click the padlock icon in the address bar.
Select Site settings.
Find Notifications and adjust your preference.