Exploitation attempts have surged for a critical vulnerability in the React user interface library for Web applications. Some are capable of bypassing Web application firewall rules, while others are ...

A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the file-encrypting malware less than a minute later.