Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Cato CTRL™ Threat Brief: “React2Shell” Vulnerability Targeting React Server Components
Excerpt
Executive Summary On Wednesday, December 3, a critical remote code execution (RCE) vulnerability in React Server Components (RSC), dubbed React2Shell (CVE-2025-55182), was disclosed . The CVE was discovered by security researcher Lachlan Davidson. It quickly gained traction with multiple third-party proof of concepts (PoCs) being published of varying quality and credibility. This grace period, during which an official PoC was not available, was a gift for defenders. As a…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…