ZnDoor Malware Exploiting React2Shell Vulnerability to Compromise Network Devices

Since December 2025, a concerning trend has emerged across Japanese organizations as attackers exploit a critical vulnerability in React/Next.js applications. The vulnerability, tracked as CVE-2025-55182 and known as React2Shell, represents a remote code execution flaw attracting widespread exploitation. While initial attacks primarily deployed cryptocurrency miners, security researchers uncovered more sophisticated threats targeting network infrastructure through […]

The post ZnDoor Malware Exploiting React2Shell Vulnerability to Compromise Network Devices appeared first on Cyber Security News.