React2Shell Remote Code Execution
React2Shell is a critical unauthenticated remote code execution (RCE) vulnerability affecting React Server Components (RSC) and frameworks that implement the Flight protocol, including specific vulnerable versions of Next.js. A remote attacker can craft a malicious RSC request that triggers server-side deserialization, leading to arbitrary code execution without authentication or user interaction.
Read at FortiGuard Outbreak Alerts
- Vendor
- Node.js
- Product
- Node.js
- Exposure class
- Developer platform
Why it ranks 13 (Routine)
- Product class: developer platform
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- FortiGuard Outbreak Alerts (fortiguard.fortinet.com)
Related coverage
Other items that share a CVE or were clustered with this one.