Critical React2Shell flaw exploited in ransomware attacks A gang the critical vulnerability (CVE-2025-55182) to gain initial access corporate networks and deployed file-encrypting malware less than a minute later.