Security News Hackers Exploit React2Shell to Hijack Web Traffic via Compromised NGINX Servers TheHackerNews Daniel Bender 04 Feb 2026 Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.