React2Shell: Rapid CVE-2025-55182 Exploitation Exposed

The report details a critical RCE vulnerability (React2Shell, CVE-2025-55182 with CVSS 10.0) in React Server Components and affected Next.js releases, public PoCs released by a researcher, and rapid weaponization by China-nexus actors and opportunistic scanners within hours of disclosure, causing widescale scanning, exploitation attempts, and emergency mitigations by major providers; organizations are urged to patch immediately, enable interim protections, and hunt for related IOCs.