History

5 Dec 2025

1 new, 0 updated.

New that day

  1. criticalpatchedexploited Meta React Server Components Remote Code Execution Vulnerability Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182. Added to CISA KEV on 2025-12-05 (federal deadline 2025-12-12). CVE-2025-551822 sources