DanSec

Vulnerability

CVE-2025-55182

In 12 briefs, most recently 6 April 2026. RSS for this tag

Published 2025-12-03

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Meta React Server Components Remote Code Execution Vulnerability.

Added 2025-12-05 · used in ransomware campaigns

Coverage in DanSec Daily

  1. The $285M Drift hack by North Korean actors, Fortinet FortiClient EMS exploitation (CVE-2026-35616), and the BKA unmasking of REvil ransomware operators.
  2. The EU Commission cloud breach by TeamPCP, the $280M Drift Protocol heist by North Korean actors, and Stryker's data-wiping attack.
  3. The Trust Wallet Chrome extension theft, Ivanti EPMM zero-day attacks, and the DarkSpectre browser extension campaign hitting 2.2 million users.
  4. LKQ Oracle EBS breach, Cisco AsyncOS zero-day CVE-2025-20393 exploited by China-linked APT, and Kimwolf botnet hijacking 1.8M Android devices for DDoS.
  5. SoundCloud breach and VPN disruption, Askul ransomware exposing 740,000 records, and ShinyHunters extorting PornHub over Mixpanel-linked data theft.
  6. The Coupang breach (33.7M customers), Akira's Fieldtex claim, and the exploited Gladinet CentreStack and React2Shell (CVE-2025-55182) flaws.
  7. React2Shell exploitation, Gladinet CentreStack hard-coded key attacks, WinRAR CVE-2025-6218 abuse, and Fortinet auth bypass patches in this security news brief.
  8. The 64M-record Barcelona data theft arrest, STAC6565 and QWCrypt attacks on Canadian firms, and Microsoft's December 2025 Patch Tuesday zero-days.
  9. Pear ransomware hits Tri-Century Eye Care; React2Shell and ICTBroadcast flaws exploited; malicious VS Code extensions found in Microsoft Marketplace.
  10. React2Shell RCE exploited in breaches at 30 organisations, Kohler smart toilet camera encryption flaws, and 30+ AI IDE vulnerabilities.
  11. Clop's Oracle E-Business Suite zero-day breach at Barts Health, active exploitation of the React2Shell flaw, and a record 29 Tbps Aisuru DDoS attack.
  12. Inotiv ransomware theft, Marquis breach affecting 780,000+, and React2Shell (CVE-2025-55182) exploitation by China-linked actors.