Skip to content

CyberSIXT Search

Vendor

Meta

CVEs tracked · all time: 5
in CISA KEV · all time: 2
article · since 11 Sep: 1
articles · all time: 18

One article in the last 45 daysThe latest: Unit 42, Thu 15 Oct, 22:25 UTC.See the full timeline

Products: React Server Components, react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack and 4 more

React Server Componentsreact-server-dom-parcelreact-server-dom-turbopackreact-server-dom-webpackWhatsAppWhatsApp Desktop for WindowsWhatsApp for AndroidWhatsApp for iOS

CVEs

5 CVEs

CVE-2025-55182Meta React Server Components Remote Code Execution VulnerabilityCVSS10.0CriticalExploited99.8%EPSS14articles

CVE-2025-55177Meta Platforms WhatsApp Incorrect Authorization VulnerabilityCVSS5.4MediumExploited13%EPSS1article

CVE-2026-23863Facebook WhatsApp Desktop for Windows vulnerabilityCVSS6.5Medium–Not in KEV0.5%EPSS1article

CVE-2026-23866Facebook WhatsApp for Android vulnerabilityCVSS4.3Medium–Not in KEV0.5%EPSS1article

CVE-2026-23864Meta react-server-dom-webpack vulnerabilityCVSSUnrated–Not in KEV2.6%EPSS1article

Coverage

18 articles, all timeFull timeline RSS feed

15 OctAI-Enabled Espionage Campaign Targets Government Linux SystemsUnit 42
25 MayZero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No WarningSecurity Affairs
7 MayPCPJack worm spreads across cloud, stealing credentials via CVEsThe Hacker News
5 MayWhatsApp fixes attachment spoof and AI mediated URL bugSecurityWeek
1 MayChina-Linked Hackers Target Asian Governments, NATO State, Journalists, and ActivistsThe Hacker News
6 AprKubernetes token theft jumps 282% amid rising IT sector attacksUnit 42
6 AprAutomated Credential Harvesting Campaign Exploits React2Shell FlawDark Reading
3 AprAttackers Exploit Next.js Bug, Loot Credentials From 766 HostsSecurityWeek
2 AprHackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal CredentialsThe Hacker News
17 MarRondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attemptsSecurity Affairs
10 MarCloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud FindsInfosecurity
6 MarQ4 2025 Exploits Hit Windows and Linux, Spotlight CVE-2025-55182Securelist
12 FebThe Rise of Vibecoding: AI-Generated Malware Exploits React2ShellSecurityOnline
9 FebTeamPCP Worm Exploits Cloud Infrastructure to Build Criminal InfrastructureThe Hacker News
5 FebHackers Exploit React2Shell to Hijack Web Traffic via Compromised NGINX ServersThe Hacker News
4 FebCryptominers, Reverse Shells Dropped in Recent React2Shell AttacksSecurityWeek
4 FebReact Under Siege: Two IPs Drive 56% of Critical CVE-2025-55182 AttacksSecurityOnline
27 JanIncomplete Fix: High-Severity React Server Components DoS Flaw (CVE-2026-23864)SecurityOnline · first in our coverage