Search: CVE-2025-66478

CVE-2025-55182, known as React2Shell, is a critical remote code execution vulnerability in React Server Components. It allows unauthenticated attackers to execute arbitrary code on vulnerable servers via a crafted HTTP request. Exploitation has been observed since early December 2025, including real-world attacks deploying coin miners. The root cause is improper validation of incoming payloads, leading to prototype pollution and remote code execution. Post-exploitation activities include reverse shells, persistence, evasion, and lateral movement attempts to cloud resources. The vulnerability is actively exploited with public exploit code available. No specific affected versions or patch information is provided in the data. The severity is assessed as critical given the CVSS 10.0 score and impact described.

CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services (WSUS) affecting versions from Windows Server 2012 through 2025 with the WSUS role enabled. It allows unauthenticated attackers to execute code with system privileges by targeting WSUS instances exposed on ports 8530 and 8531. Initial patches released on October 14, 2025, were incomplete, requiring an emergency update on October 23. Exploitation has been observed shortly after patch release, with attackers using malicious PowerShell commands for reconnaissance and data exfiltration. Approximately 5,500 WSUS instances are exposed globally, posing a significant risk, especially to European organizations. The vulnerability facilitates initial access and lateral movement within networks. Immediate patching and reducing network exposure are critical to mitigate this threat.

KEVEPSS 99%Report on CVE-2025-59287VulnerabilityCWE-502#patch managementGermany+7