LexisNexis breach (FulcrumSec claims React2Shell path)
Teaser from the source
In March 2026 LexisNexis confirmed a breach of legacy servers exposing customer business contact and related data. Threat actor FulcrumSec claimed access via an unpatched React frontend “React2Shell” (CVE-2025-55182) into AWS infrastructure. LexisNexis said the matter was contained and mostly deprecated pre-2020 data.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchLinked advisories
- CVE-2025-55182Meta React-server-dom-webpack: Remote Code Execution (RCE)
- CVE-2025-55182Security Advisory 2025-041 — Critical Security Vulnerability in React Server Components
- CVE-2025-55182React Server Components are Vulnerable to RCE
- CVE-2025-55182Meta React Server Components — Meta React Server Components Remote Code Execution Vulnerability
Affected vendors and products
More on LexisNexis
Other advisories
Source: https://pwn.watch/i/lexisnexis-breach-react2shell-claim
ID