Exploitation of Critical Vulnerability in React Server Components (Updated December 9)

Critical CVSS 10.0-rated remote code execution vulnerability in React Server Components Flight protocol, tracked as CVE-2025-55182. The vulnerability affects React Server Components and is being actively discussed by Unit 42 researchers. This represents a maximum severity vulnerability that could allow attackers to execute arbitrary code remotely. The article was updated on December 9, indicating ongoing research or exploitation activity. Also references CVE-2025-66478 related to Next.js framework.