React/Next.js 曝满分RCE漏洞，无需认证即可远程代码执行

近期，聚铭安全攻防实验室监测发现了一项与React Server Components相关的远程代码执行漏洞， 该漏洞已被披露，编号为 CVE-2025-55182，CVSS 评分为 10.0 。
51CTO服务器频道

紧急：React 19 和 Next.js 的 React 服务器组件存在关键漏洞

如果你在用 React 19 / Next.js 15 / 16， 这篇就当是一个温柔但坚决的催命信： Vercel 已经出手，在它的全球 Web Application Firewall（WAF）上， 加了一层拦截规则，免费帮所有托管在上面的项目挡一波。

Critical React, Next.js flaw lets hackers execute code on servers

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.

Critical React Vulnerability Puts Web Servers At Immediate Risk

A newly discovered security flaw in the React ecosystem — one of the most widely used technologies on the web — is prompting ...
CRN

React Server Vulnerability Is No Cause For Panic: Security Expert

A critical-severity vulnerability impacting the popular React open-source library deserves attention, but is far from the ...

Critical vulnerability in React JS framework has a near 100% chance to be exploited

Researchers have uncovered a critical security flaw that could have catastrophic consequences for web and private cloud ...
Analytics India Magazine

‘Nasty’ React Vulnerability Affects 39% of Cloud Environments

A CVSS 10 rate critical vulnerability impacts React Server Components in versions 19.0–19.2.0. A patched update has been ...
Network World

Cloudflare firewall reacts badly to React exploit mitigation

That vulnerability, tracked as CVE-2025-55182, enables attackers to remotely execute code on web servers running the React 19 ...
Business Insider

Progress Gives Developers New Power with Latest Release of Kendo UI Web Components for ...

Bedford, Mass., Sept. 23, 2019 (GLOBE NEWSWIRE) -- Progress (NASDAQ: PRGS), the leading provider of application development and digital experience technologies, today announced the latest release of ...