CVE-2025-55182
KEV RANSOMWARECRITICAL 10.0EPSS 99.8%
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.
- CVSS v3.1
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 99.80% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2025-12-05, used in ransomware campaigns
- Nuclei
- critical · CWE-502
- Published
- 2025-12-03
- Updated
- 2026-08-04
Proof-of-concept exploits (320)
- https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-rea…
- Mayca369/CVE-2025-551820★ · 2026-08-31
- alyaapm/CVE-2025-55182-shellinteractive0★ · 2026-08-31
- UwUGreed/CVE-2025-55182-poc0★ · 2026-08-28
- Tc3s/REACT2SHELL-WEB-VULN0★ · 2026-08-30
- Farhan9488/CVE-2025-55182-research0★ · 2026-08-30
- JotaEspig/CVE-2025-66478-PoC-Reverse-Shell1★ · 2026-08-30
- RBKD-SEC/POC
- VaultGuardian/observer
- 0x0asif/CVE-2025-55182
- 0xBlackash/CVE-2025-55182
- 0xN7y/CVE-2025-55182
- 0xPThree/cve-2025-55182
- 0xROI/CVE-2025-55182
- 0xSalm0n/CVE-2025-55182
- 0xsj/CVE-2025-55182
- 6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-
- AbdullahMaqbool22/Explosive-As-Hell-MCS-Qualifer-Web-500
- AdityaBhatt3010/React2Shell-CVE-2025-55182
- AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web
- AggressiveUser/React2Hell
- AkhmadKholmurodov/React2Shell_Exploit
- Alejandro609x/JEFAZO-CVE-2025-55182-Checker
- AliHzSec/CVE-2025-55182
- Archerkong/CVE-2025-55182
- AsadAhmad-1337/React-2-Shell
- BBD-YZZ/CVE-2025-55182
- BIG02-bot/React2Shell-CVE-2025-55182-An-lise-T-cnica
- BeichenDream/CVE-2025-55182-GodzillaMemoryShell
- BrianLopezM99/react2shell-CVE-2025-55182
- Call123X/-cve-2025-55182
- CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit
- Chocapikk/CVE-2025-55182
- Cillian-Collins/CVE-2025-55182
- CirqueiraDev/MassExploit-CVE-2025-55182
- CrazyloveforWeb/Golang-CVE-2025-55182-POC
- Darker-Ink/react-ssr-vulnerability
- DevVaibhav07/POC-CVE-2025-55182
- Dh4v4l8/CVE-2025-55182-poc-tool
- DoobTheGoober/CVE-2025-55182-Test-Server
- EQSTLab/CVE-2025-55182
- Emiyelbarto/CVE-2025-55182-PoC
- Evillm/CVE-2025-55182-PoC
- EynaExp/CVE-2025-55182-POC
- Faithtiannn/CVE-2025-55182
- Fomovet/cve-2025-55182
- FurkanKAYAPINAR/ReactNext2Shell
- George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0-
- Golden-Secure/CVE-2025-55182
- Gymnott1/CVE-2025-55182
- H4R335HR/reactshell
- HUAHUAI23/CVE-2025-55182-POC
- Herick-Costa/CVE-2025-55182-React2Shell-RCE
- I3r1h0n/React2Shell
- Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell
- IrsyadSEC/CVE-2025-55182-MassPayloadAttack
- J4ck3LSyN-Gen2/CVE-2025-55182
- Jaycelation/CVE-2025-55182
- Jenderal92/CVE-2025-55182-React2shell
- KingHacker353/R2C-CVE-2025-55182-66478
- LC-pro/CVE-2025-55182-EXP
- LQTjim/next-bug-CVE-2025-55182
- Least-Significant-Bit/CVE-2025-55182
- Legus-Yeung/CVE-2025-55182-exploit
- LemonTeatw1/CVE-2025-55182-exploit
- LucasPDiniz/CVE-2025-55182
- LuizHenz/PoC-CVE-2025-55182
- LvMalware/CVE-2025-55182
- M4rgs/CVE-2025-55182-React2Shell-Exploit
- M4xSec/CVE-2025-55182-React2Shell-RCE-Shell
- MammaniNelsonD/React2P4IM0Nshell
- MedusaSH/POC-CVE-2025-55182
- MikeTheHash/CVE-2025-55182
- MoLeft/React2Shell-Toolbox
- Mr-Destroyer/CVE-2025-55182
- MrR0b0t19/CVE-2025-55182-shellinteractive
- MrSol0/CVE-2025-55182-Terminal
- MuharremK0/Info-Sys-Security-CVE-2025-55182
- MyCompanyOrganization/React2Shell-Kingdom
- Namsom007/CVE-2025-55182-Exploit
- NathanJ60/react2shell-interactive
- Night-have-dreams/CVE-2025-55182-PoC
- Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182
- Pa2sw0rd/exploit-CVE-2025-55182-poc
- Phucc29/CVE-2025-55182
- Rat5ak/CVE-2025-55182-React2Shell-RCE-POC
- RavinduRathnayaka/CVE-2025-55182-PoC
- Rsatan/Next.js-Exploit-Tool
- RuoJi6/CVE-2025-55182-RCE-shell
- RyosukeDTomita/CVE-2025-55182
- S-Mughal/NextJS-app-CVE-2025-55182
- S3cr3t-SDN/React4Shell
- Sairbo/Unihackers---CVE-2025-55182-
- Saturate/CVE-2025-55182-react2shell
- SentinelXofficial/CVE-2025-55182
- Shadowroot97/React2Shell-CVE-2025-55182
- SpeatX/React2Shell-CVE-2025-55182
- Spritualkb/CVE-2025-55182-exp
- Stonelinks/react-cve-2025-55182
- TH-SecForge/CVE-2025-55182
- Tiger-Foxx/exploit-react-CVE-2025-55182
- UmmItKin/CVE-2025-55182-PoC
- VVVI5HNU/CVE-2025-55182
- Ya0h4cker/CVE-2025-55182
- Yyax13/CVE-2025-55182
- ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner
- aastikgakhar/CVE-2025-55182-react2shell
- acheong08/CVE-2025-55182-poc
- ahmedshamsddin/CVE-2025-55182
- alfazhossain/CVE-2025-55182-Exploiter
- aliclub0x00/CVE-2025-55182-POC-NEXTJS
- amir-malek/react-cve-2025-55182
- andressuarezmonk/CVE-2025-55182
- anuththara2007-W/CVE-2025-55182-Exploit-extension
- aquinn-r7/CVE-2025-55182-VulnCheckPOC
- aseemyash/krle
- atastycookie/CVE-2025-55182
- avoidme12/CVE-2025-55182-POC
- bakhod1r/CVE-2025-55182
- byte16384/CVE-2025-55182
- c0rydoras/CVE-2025-55182
- cc3305/CVE-2025-55182
- ceh-aditya-raj/CVE-2025-55182
- ceortiz33/CVE-2025-55182
- chitoz1300/React2Shell-CVE-2025-55182
- chrahman/react2shell-CVE-2025-55182-full-rce-script
- clevernyyyy/CVE-2025-55182-Dockerized
- cyberleelawat/CVE-2025-55182
- d0cnull/nextjs-CVE-2025-55182
- deepankarkumar1/CVE-2025-55182_Vulnerable-Application
- diamorphine666/React2shell-CVE-2025-55182-Exploit
- dotnetguard/CVE-2025-55182-Exploit
- dr4xp/react2shell
- ducducuc111/CVE-2025-55182-poc
- dwisiswant0/CVE-2025-55182
- eagle-nett/React2Shell-PoC-CVE-2025-55182
- ejpir/CVE-2025-55182-bypass
- ejpir/CVE-2025-55182-research
- emadshanab/POC-for-CVE-2025-55182
- emredavut/CVE-2025-55182
- en0f/CVE-2025-55182-poc-json
- exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC
- eytannatye/R2S_CVE-2025-55182
- fullhunt/react2shell-test-server
- gagaltotal/tot-react-rce-CVE-2025-55182
- garux-sec/PoC-react2shell-CVE-2025-55182
- git0xLai/React2ShellPoC
- greenheadHQ/CVE-2025-55182
- grejh0t/CVE-2025-55182
- gunyakit/CVE-2025-55182-PoC-exploit
- h0tak88r/next88
- hakkuri01/r2rs
- hoosin/CVE-2025-55182
- hualy13/CVE-2025-55182
- hujiaozhuzhu/CVE-2025-55182_liyon
- hulh122/CVE-2025-55182
- hyan0116/Next.js-RCE-CVE-2025-55182
- iamblacksolo2-BugBounty/POC-CVE-2025-55182
- iamblacksolo2-BugBounty/POC2-CVE-2025-55182
- ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell
- ihsansencan/React2Shell-CVE-2025-55182
- ilixm/PoC-RCE-CVE-2025-55182
- imbas007/POC-CVE-2025-55182
- indra-031/React2Shell-Exploit-CVE-2025-55182
- itsismarcos/Bot-exploit-CVE-2025-55182
- itumo-arigatone/study-CVE-2025-55182
- jandelima/cve-2025-55182-poc-test
- jf0x3a/CVE-2025-55182-exploit
- joaovicdev/EXPLOIT-CVE-2025-55182
- joelvaiju/react2shell-CVE-2025-55182-poc
- joshterrill/CVE-2025-55182-realistic-poc
- k1llmelira/react2shell-exploit
- kOaDT/poc-cve-2025-55182
- keklick1337/CVE-2025-55182-golang-PoC
- kindone09/CVE-2025-55182
- klassiker/CVE-2025-55182
- kondukto-io/vulnerable-next-js-poc
- l0n3m4n/CVE-2025-55182-Waf
- l4rm4nd/CVE-2025-55182
- lachlan2k/React2Shell-CVE-2025-55182-original-poc
- liamromanis101/cve-2025-55182
- litndat/React2Shell-PoC-CVE-2025-55182
- logesh-GIT001/CVE-2025-55182
- lowercasenumbers/CVE-2025-55182
- lucyz1125/CVE-2025-55182-Next.js-RCE
- luoluoqingge/CVE-2025-55182
- luoqichen/CVE-2025-55182-POC
- lutraat/CVE-2025-55182-React-RSC-Exploit
- m3ngx1ng/CVE-2025-55182-GUI
- mahaveer-choudhary/CVE-2025-55182
- mantvmass/react2shell
- masterwok/PoC-CVE-2025-551820★ · 2026-04-10
- min8282/CVE-2025-55182
- mohit121312/CVE-2025-55182_full_exploit
- momika233/CVE-2025-55182-bypass
- monarchfish/cve-2025-55182-poc
- mooowu/cve-2025-55182-poc
- mrmtwoj/React2Shell-CVE-2025-55182
- msanft/CVE-2025-55182
- nehkark/CVE-2025-55182
- nexxp90/CVE-2025-55182_RCE_Exploit
- niokagi/react-cve-2025-55182
- nomorebreach/POC-CVE-2025-55182
- oguri-souhei/CVE-2025-55182
- open-flaw/CVE-2025-55182
- opsecramdan/react2shell-cve-2025-55182
- orgito1015/CVE-2025-55182-RCE-Exploit
- oscar-mine/R2SAE
- osman-butt/CVE-2025-55182-demo
- p3ta00/react2shell-poc
- pax-k/react2shell-CVE-2025-55182-full-rce-script
- pkrasulia/CVE-2025-55182-NextJS-RCE-PoC
- premdanav/react2shelldemo
- prestonhashworth/cve-2025-55182
- ps-interactive/cve-2025-55182
- pyroxenites/Nextjs_RCE_Exploit_Tool
- racall/cve-2025-55182-node
- rahul-securify/React2Shell-CVE-2025-55182
- raivenLockdown/WEB-CLI_RCE_React2Shell
- randarts/react-rce
- razureink/cve-2025-55182-react2shell_reproduction
- rix4uni/CVE-2025-55182
- rl0x01/CVE-2025-55182_PoC
- robbin0919/CVE-2025-55182
- rsch-io/CVE-2025-55182-React2Shell
- rvzsec/react2shell
- ryanhafid/PoC_CVE-2025-55182
- sangleshubham/React-Security-CVE-2025-55182-Exploit
- scumfrog/FiberBreak
- se1zer/Nextjs_Exploit_Tool
- selectarget/CVE-2025-55182-Exploit
- shen771/Blackash-CVE-2025-55182
- sherlocksecurity/CVE-2025-55182-Exploit-scanner
- shibaaa204/React2Shell
- shreyas-malhotra/React2Shell-CVE-2025-55182
- shyambhanushali/React2Shell
- sickwell/CVE-2025-55182
- simantchaudhari/CVE-2025-55182
- snipevx/React2Shell-POC
- sohaibeb/CVE-2025-55182
- sponte/nextjs-cve-version-confusion
- subhdotsol/CVE-2025-55182
- subzer0x0/React2Shell
- sudo-Yangziran/CVE-2025-55182POC
- sumanrox/rschunter
- sun977/CVE-2025-55182
- surajhacx/react2shellpoc
- tamagorengs/react2shell-poc-CVE-2025-55182
- tanvirahmedcs/CVE-2025-55182
- thekamran/CVE-2025-55182-Proof-of-Concept
- theman001/CVE-2025-55182
- theman001/CVE-2025-55182_PoC-Test-Server
- timsonner/React2Shell-CVE-2025-55182
- tinashelorenzi/CVE-2025-55182
- topstar88/CVE-2025-55182
- trax69/cve-2025-55182-poc
- vulncheck-oss/cve-2025-55182
- w3nch/CVE-2025-55182-in-go
- whiteov3rflow/CVE-2025-55182-poc
- wnaspy/CVE-2025-55182
- woorifisa-service-dev-6th/tech-seminar-React2Shell
- xcanwin/CVE-2025-55182-React-RCE
- xiaoLvChen/CVE-2025-55182
- xkey8/react2shell
- yannisduvignau/react2shell-exploit
- yanoshercohen/React2Shell_CVE-2025-55182
- ycseo-git/CVE-2025-55182
- ynsmroztas/NextRce
- younesZdDz/CVE-2025-55182
- yunaranyancat/CVE-2025-55182-NSE
- yuta3003/CVE-2025-55182
- zack0x01/vuln-app-CVE-2025-55182
- zessu/CVE-2025-55182-Typescript
- zorejt/Rust_CVE-2025-55182
- zxz3650/CVE-2025-55182-POC
- zzhorc/CVE-2025-55182
- 0xdak/CVE-2025-71389_exploit
- 5olitude/CVES
- AKEFIS/poc-react2shell
- Achanandhi-M/Kubecon-India-2026-Demo
- DAADAISMYLIFE/react2shell
- Dsochk/TestSite
- EvtDanya/rsc-vulnerabilities
- Fhwang0926/seo-labs
- Jeanback1/exploit-vault
- JoelOt/Worm-MLW-Project
- Lasersinho/react2shell-poc
- LeonMotaung/nextjs-horror
- MoisesTapia/react2shell-metasploit
- NextCyber/nextcyber-vulnhub
- SugiB3o/React2Shell
- ZocketZero/vuln
- achrafsouk/react2shell-poc
- benjaminwilsonn/react2shell-POC
- ckiellandpanw/brokenbank
- codinglain/react2shellpoc
- cybertechajju/CVE-2025-55184-POC-Expolit
- dika-maulidal/react2shell-poc
- edhofdc/Apasihehe
- gguatit/React2Shell--korean-
- gwangwon0807/whs_kr
- h3n1s3/React2shell-Research
- hanacus87/react2shell-poc
- hzhsec/cve_2025_55182_test
- jedisct1/react2shell-exploit
- lazy-sharaf/React2Shell
- liyander/React2shell-poc
- longlong64bit/vulnable-board-web
- nerdylua/React-RCE
- nzkdevsaider/r2shellpoc
- peiqiF4ck/WebFrameworkTools-5.5-enhance
- rootandbeer/react2shell
- serasma/ncs-app-security
- songsanggggg/CVE-2025-55182
- tauh33dkhan/react-shell
- vickykumar123/React2Shell_POC
- vulnquest58/react2shell-exploit
- wangxso/CVE-2025-66478-POC
- wargaintibumi/react2int-shell
- wnaspy/CVE-POC-WEAPON