Actively exploited vulnerabilities affecting Meta products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-55182https://wildfortech.com/security#CVE-2025-55182This vulnerability in Meta's React Server Components allows unauthenticated attackers to execute arbitrary code remotely by exploiting how React decodes payloads sent to React Server Function endpoints. Because no authentication is required, any internet-exposed application using React Server Components could be compromised without user interaction. Critically, this flaw is already being exploited by ransomware operators, meaning real-world attacks are active and the risk of full system compromise or data extortion is immediate and severe.Fri, 05 Dec 2025 00:00:00 GMTMetaReact Server Components