CISA Alerts Exploited React Native Community Security Flaw
ID: e9863792-cd93-5163-bd9f-1f567861389b
STIX ID: report--e9863792-cd93-5163-bd9f-1f567861389b
Feed Name: GBHackers
Threat Score
CISA added CVE-2025-11953 to its Known Exploited Vulnerabilities catalog: an OS command injection in the React Native Community CLI (via the Metro development server) that allows unauthenticated POST requests to execute arbitrary commands—particularly dangerous on Windows systems. The advisory warns of active exploitation, instructs immediate updates, isolation of development servers, and log monitoring, and sets an FCEB remediation deadline of February 26, 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.