Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

CISA has added a critical React Server Components vulnerability (CVE-2025-55182) to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The flaw has a maximum CVSS score of 10.0 and allows for remote code execution, making it extremely dangerous for organizations using React Server Components. The vulnerability has been dubbed 'React2Shell' and represents a significant threat to web applications built with React.