exploitCVE-2025-55182
CVE-2025-55182: React2Shell — RCE in React Server Components
React2Shell — a CVSS 10.0 unauthenticated RCE in the React Server Components deserializer (react-server-dom-*), added to CISA KEV two days after disclosure. Root cause, affected versions, and a working Python PoC.
cverceprototype-pollutionreactpoc