LexisNexis breach (FulcrumSec claims React2Shell path)
In March 2026 LexisNexis confirmed a breach of legacy servers exposing customer business contact and related data. Threat actor FulcrumSec claimed access via an unpatched React frontend “React2Shell” (CVE-2025-55182) into AWS infrastructure. LexisNexis said the matter was contained and mostly deprecated pre-2020 data.
Teaser aus der Quelle
In March 2026 LexisNexis confirmed a breach of legacy servers exposing customer business contact and related data. Threat actor FulcrumSec claimed access via an unpatched React frontend “React2Shell” (CVE-2025-55182) into AWS infrastructure. LexisNexis said the matter was contained and mostly deprecated pre-2020 data.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei pwn.watch lesenVerknüpfte Advisories
- CVE-2025-55182Meta React-server-dom-webpack: Remote Code Execution (RCE)
- CVE-2025-55182Security Advisory 2025-041 — Critical Security Vulnerability in React Server Components
- CVE-2025-55182React Server Components are Vulnerable to RCE
- CVE-2025-55182Meta React-server-dom-webpack: Remote Code Execution (RCE)
Betroffene Hersteller und Produkte
Mehr zu LexisNexis
Weitere Advisories
Quelle: https://pwn.watch/i/lexisnexis-breach-react2shell-claim