React2Shell Remote Code Execution (RCE) Vulnerability

The report warns of React2Shell, a critical unauthenticated RCE in React Server Components and some Next.js implementations that enables arbitrary server-side code execution, and summarizes Iran-linked cyber operations that are suspected to exploit such vulnerabilities; these operations reportedly rely on opportunistic exploitation of unpatched edge infrastructure and use TTPs including phishing, DDoS, data exfiltration, and destructive attacks targeting government, critical infrastructure, and enterprise environments.