{"uuid": "5d504725-8c7e-4db3-a809-cdfae736b417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-55182", "type": "exploited", "source": "https://t.me/CyberDispatch/289", "content": "Attackers are abusing React2Shell to plant Linux backdoors like KSwapDoor and ZnDoor.\n\nThis hits orgs that left React and Next.js servers unpatched.\n\nMicrosoft saw reverse shells, Cobalt Strike, and stolen cloud tokens tied to CVE-2025-55182, and Shadowserver tracks over 111,000 exposed IPs.", "creation_timestamp": "2026-08-19T21:00:06.257163Z"}