Dec 11, 2025React2Shell, Critical RCE in React Server ComponentsA critical RCE vulnerability in React 19 and Next.js 15/16 that went from disclosure to mass exploitation in 48 hours. Here's what security leaders need to know.