corpus.blog
42,180 blogs · 5,214,511 posts Claim your blog
Record · corpus.blog/posts/01a0d4a5-d702-7110-a43f-5819cd5c89d8

Exploitation of Critical Vulnerability in React Server Components (Updated December 12)

Unit 42 · published 12 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
2blogs citing
First cited
14 Dec 2025
Most recent
21 Jul 2026
Rank this month
not ranked
External links
37
Words captured
4,912

Cited by

Blog
In the post
Date
Smashing Magazine
Weaponizing And Defending The React Flight Protocol: Deserialization Sinks In RSCs Read at the source ↗
21 Jul 2026
alonso.network
The Next.js Turducken Read at the source ↗
14 Dec 2025

Links from this post

Link
Host
https://nextjs.org/
nextjs.org
https://cloud.google.com/blog/topics/threat-intelligence/dprk-adopts-etherhiding
cloud.google.com
https://nvd.nist.gov/vuln/detail/CVE-2025-55182
nvd.nist.gov
Security Advisory: CVE-2025-66478 Read at the source ↗
nextjs.org
https://www.paloaltonetworks.com/cortex/cortex-xpanse
paloaltonetworks.com
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/url-filtering-features/advanced-url-filtering
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/dns-security
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/ngfw
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/advanced-threat-prevention/administration
docs.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XDR
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XSIAM
docs-cortex.paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cloud
paloaltonetworks.com
https://www.paloaltonetworks.com/prisma/cloud/cloud-code-security
paloaltonetworks.com
https://www.virustotal.com/gui/ip-address/38.162.112.141/detection
virustotal.com
https://fm.js
fm.js
https://raw.githubusercontent.com/laolierzi-commits/phpbd/refs/heads/main/rjs/filemanager-standalone.js
raw.githubusercontent.com
https://nodejs.org
nodejs.org
https://www.virustotal.com/gui/file/33641bfbbdd5a9cd2320c61f65fe446a2226d8a48e3bd3c29e8f916f0592575f
virustotal.com
https://nvd.nist.gov/vuln/detail/CVE-2025-31324
nvd.nist.gov
https://www.virustotal.com/gui/file/a455731133c00fdd2a141bdfba4def34ae58195126f762cdf951056b0ef161d4
virustotal.com
https://www.virustotal.com/gui/file/4745703f395282a0687def2c7dcf82ed1683f3128bef1686bd74c966273ce1c5
virustotal.com
https://www.sysdig.com/blog/unc5174-chinese-threat-actor-vshell
sysdig.com
Critical Security Vulnerability in React Server Components Read at the source ↗
react.dev
https://nvd.nist.gov/vuln/detail/cve-2024-1709
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/cve-2023-46747
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/cve-2023-22518
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/cve-2022-0185
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-30525
nvd.nist.gov
https://threatvault.paloaltonetworks.com/?q=96779
threatvault.paloaltonetworks.com
https://threatvault.paloaltonetworks.com/?q=96780
threatvault.paloaltonetworks.com
https://threatvault.paloaltonetworks.com/?q=96787
threatvault.paloaltonetworks.com
https://xsoar.pan.dev/docs/reference/playbooks/cve-2025-55182-and-cve-2025-66478---react-and-next-js-remote-code-execution
xsoar.pan.dev
https://docs-cortex.paloaltonetworks.com/p/XPANSE
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/Cortex+CLOUD
docs-cortex.paloaltonetworks.com
https://www.paloaltonetworks.com/prisma/cloud
paloaltonetworks.com
https://cloud.google.com/blog/topics/threat-intelligence/initial-access-brokers-exploit-f5-screenconnect
cloud.google.com
https://hivepro.com/threat-advisory/unc5174-functions-as-an-initial-access-broker-exploiting-vulnerabilities/
hivepro.com
Elsewhere on unit42.paloaltonetworks.com (6)