Exploitation Activity Ramps Up Against React2Shell

React2Shell (CVE-2025-55182) is a critical RCE deserialization flaw in React Server Components that received a CVSS of 10 and has been exploited in the wild within hours of disclosure; attackers are rapidly targeting internet-facing Next.js and other RSC-based deployments for cryptomining, credential theft, and backdoor campaigns, with researchers and scanners reporting widespread exploitation attempts, millions of exposed services, and some WAF-bypass techniques.