React2Shell fallout spreads to sensitive targets as public exploits hit all-time high

React2Shell (CVE-2025-55182) is a critical remote-code-execution vulnerability in React Server Components that has seen rapid, widespread exploitation since disclosure: hundreds of public exploits exist, multiple nation-state groups and criminal gangs are leveraging it, and incidents include reverse shells, lateral movement, data theft and rapid ransomware deployment (e.g., Weaxor). Researchers and vendors report dozens to hundreds of compromised machines and urge urgent patching and remediation as active exploitation continues to escalate.