Federal agencies now only have one more day to patch React2Shell bug

CVE-2025-55182 (React2Shell), a vulnerability in React Server Components embedded in millions of sites and products, is being actively exploited by state-linked actors (China, North Korea) and numerous cybercriminal groups to deliver cryptominers, botnets, backdoors and other malware. CISA added the CVE to its Known Exploited Vulnerabilities catalog with an accelerated patch deadline, and multiple security firms (Unit 42, Rapid7, CyCognito) report global compromises across government, finance, media, education and other sectors.