waqasishaque logo Waqas Ishaque
  • Blog
  • Tools
  • Tags
  • About
  • cybersecurity

    Notes and ramblings, typically about LLMs.

    React2Shell: The Critical RCE Vulnerability Affecting Next.js Apps

    CVE-2025-66478 is a CVSS 10.0 vulnerability in React Server Components that enables remote code execution. Here's what you need to know and how to patch.

    Waqas Ishaque•Sat Jan 10 2026

    Pages

    • Home
    • Blog
    • Tools
    • Tags
    • About

    Posts

    • React2Shell: The Critical RCE Vulnerability Affecting Next.js Apps
    • How to Remove Windows NUL File
    • CSS Clamp Calculator and Tutorial
    • How to Add a Playful Kitten to Your Webpage
    • Next.js 16.1: Turbopack Gets Even Faster

    Socials

    • LinkedIn
    • Github