Back to Intel

Intel Node

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

mediumvulnerability2026-04-02T19:30:00+00:00source excerpt
vulnerabilitycveexploitationcloud

Source excerpt · The upstream feed supplied only part of this article.Read the original source →

A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command history, Stripe API keys, and GitHub tokens at scale.

Read Original Source