HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2025-55182: React Server Components Flight deserialization RCE (React2Shell)

HoneyLabs honeypots recorded 426 probes matching CVE-2025-55182 from 28 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2025-12-05.

Addresses probing it

Source IPProbesNetworkCountry
45.198.224.85160Vpsvault.host LtdUnited States
20.199.44.24369Microsoft CorporationFrance
152.236.14.13732Latitude.shCanada
47.79.233.13630Alibaba (US) Technology Co., Ltd.Singapore
176.65.132.1926TechTies Inc.The Netherlands
94.26.0.10320RMP Protection LimitedGermany
34.185.215.13612Google LLCGermany
34.187.169.2412Google LLCUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS215925Vpsvault.host Ltd1612
AS8075Microsoft Corporation691
AS396982Google LLC605
AS396356Latitude.sh352
AS45102Alibaba (US) Technology Co., Ltd.301
AS197170TechTies Inc.261

Where it comes from

CountryProbes
United States184
France70
The Netherlands39
Germany37
Canada34
Singapore31

Captured requests

  • /api
  • /admin
  • /login
  • /

HTTP client fingerprints

  • b11cuq071_00050815_57e22b7f_xe7f3
  • b11cuq061_00050812_0421ce22_xe7f3
  • b11cuq082_00050816_8184102b_xd0f1e7f3
  • b11cuq093_00050813_59548195_x8e84d668e7f3

CVE report

CVE report

Open a specific CVE from the CVE tracker.