Threat Intelligence Report

Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) | Google Cloud Blog

📅 December 13, 2025 📰 cloud.google.com 🔍 1 CVE(s) referenced

Multiple threat actors, including China-nexus espionage groups and cybercriminals, are actively exploiting the critical React2Shell (CVE-2025-55182) vulnerability to deploy a range of backdoors, tunneling tools, and cryptominers, posing severe risks to organizations using unpatched React and Next.js servers.

vendor

CVE-2025-55182

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle