Security News Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation TheHackerNews Daniel Bender 06 Dec 2025 CISA flags the React2Shell remote code flaw after real-world attacks hit millions of exposed services.