CVE-2025-55182: Initial Analysis of React2Shell Exploitations | Bitsight

Within 48 hours of disclosure, threat actors began mass-exploiting the critical React2Shell vulnerability (CVE-2025-55182) in React.js and Next.js, compromising thousands of internet-facing systems with botnets and crypto miners, underscoring the urgent need for rapid remediation.