Signalis
sign in--:--:--UTC
CVEs

CVE-2025-55182

exploited in the wild☆ pin
CVSS
10.0
Reports
23
First seen
Dec 4, 2025
Last seen
Aug 7, 2026
Affected product

React2Shell

Associated actors

TeamPCP ×3The Gentlemen ×2APT28 ×2Clop ×2APT36 ×1Armored Likho ×1Actor B ×1Dysphoria operators ×1C0XMO ×1Cadet Blizzard ×1Bitter ×1Cloud Atlas ×1CL-STA-1114 ×1Contagious Interview ×1DarkSpectre ×1CyberArmyofRussia_Reborn ×1Dr. Tube / BonJoviGoesHard ×1Dysphoria ×1Bissa Scanner operator ×1Actor C ×1

Recent reports

Critical

July 2026 CVE Landscape: 85 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktHigh

Dysphoria DDoS botnet compromises 200k devices using blockchain C2

Bleeping ComputerHigh

StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

HKCERTHigh

The Gentlemen Ransomware: RaaS Operator Grows Rapidly with Custom Tooling

Palo Alto Unit 42High

June 2026 CVE Landscape: 60 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktHigh

ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

The Hacker NewsCritical

Vect and TeamPCP partner for ransomware campaigns targeting supply chain

Sophos NewsHigh

ChocoPoc malware delivered via trojanized exploits on GitHub

Bleeping ComputerHigh

ChocoPoC malware targets cybersecurity researchers via trojanized GitHub PoC exploits

Bleeping ComputerHigh

Container security analysis: vulnerabilities, misconfigurations, and risks in Docker images

Kaspersky SecurelistHigh

AI Threat Landscape Digest: March-April 2026 — Criminal AI Deployment and Vulnerability Acceleration

Check Point ResearchCritical

EtherRat and TukTuk Malware Lead to Gentlemen Ransomware Deployment

The DFIR ReportHigh

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

SentinelOne LabsHigh

CERT-EU Cyber Brief April 2026 – Espionage, Supply-Chain Attacks, and Critical Infrastructure Threats

CERT-EU Threat IntelHigh

SHADOW-EARTH-053: China-Aligned Cyberespionage Campaign Against Asian Government and Defense Sectors

Trend Micro ResearchCritical

Threat Intelligence Report – 27 April: Vercel, Bitwarden, UK Biobank breaches; critical CVEs and ransomware

Check Point ResearchCritical

Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting Campaign

The DFIR ReportHigh

Untangling a Linux Incident With an OpenAI Twist (Part 2)

Huntress BlogHigh

Multiple Threat Actors Rapidly Exploit React2Shell: Case Study of Active Compromise

JPCERT/CC BlogHigh

Cyber Brief December 2025: Espionage, Ransomware, and Infrastructure Attacks Across Europe and Beyond

CERT-EU Threat IntelCritical

PeerBlight Linux Backdoor and Associated Malware Exploiting React2Shell CVE-2025-55182

Huntress BlogCritical

Critical RCE Vulnerability in React Server Components (CVE-2025-55182)

CERT-EU AdvisoriesHigh

Multiple Vulnerabilities in React Server Components and Next.js (CVE-2025-55182, CVE-2025-66478)

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans