React Server Components - Remote Code Execution CVE-2025-55182

Severity
EPSS Score
EPSS Percentile
Vulnerability description
Not available
Risk description
Not available
Exploit capabilities

Sniper can gain unauthenticated Remote Code Execution on the target system and extract multiple artefacts as evidence.

Recommendation
Not available
Codename
react2shell
Detectable with
Network Scanner
Scan engine
Sniper
Cisa Kev
Cybersecurity Infrastructure Security Agency (CISA) Yes
Exploitable with Sniper
Yes
CVE Published
Dec 3, 2025
Detection added at
Software Type
Web server
Vendor
Facebook
Product
React

Detect this vulnerability now!

Check your clients' targets (or your own) for this vulnerability and thousands more! Get proof for validation with our ethical hacking toolkit.