exploit/multi/http/react2shell_unauth_rce_cve_2025_55182

weaponized

Unauthenticated RCE in React Server Components (React2Shell)

view exploit source metasploittype exploitpublished 2025-12-03catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-66478US—Exploit
Rejected reason: This CVE is a duplicate of CVE-2025-55182.
CVE-2025-55182US—OT criticalKEV
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-serve…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan