top of page



Perceptive Security
SOC/SIEM Consultancy

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182
Published:
8 december 2025 om 17:18:38
Alert date:
8 december 2025 om 18:00:42
Source:
wiz.io
Technical analysis of CVE-2025-55182, dubbed React2Shell, affecting Next.js applications. The vulnerability is being actively exploited in the wild with sophisticated attack techniques including credential harvesting and cloud backdoor deployment. Wiz security researchers provide detailed breakdown of exploit mechanics and document real-world attack campaigns targeting this vulnerability.
Technical details
Mitigation steps:
Affected products:
Next.js
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
bottom of page
