CISA alerts of critical vulnerability impacting free program used for building user interfaces 

Dec 08, 2025 - 03:37 PM
Cybersecurity image of a digital lock

A critical, unauthenticated remote code execution vulnerability known as React2Shell has been added to the Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities Catalog. The vulnerability impacts applications using versions of React 19, a free, open-source JavaScript library commonly used for building web and native user interfaces. The vulnerability is also listed with a maximum score of 10 by the Common Vulnerability Scoring System.  
 
“It is extremely rare to score a 10 out of 10,” said Scott Gee, AHA deputy national advisor for cybersecurity and risk. “This is an easily exploitable vulnerability and there are Chinese actors actively using it, according to Amazon’s threat intelligence teams. If this vulnerability exists in your environment, it is critical that you patch it as soon as possible.” 

For more information on this or other cyber and risk issues, contact Gee at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity. 

Related News Articles

Headline
AHA comments on cybersecurity, AI attacks for Senate Homeland Security subcommittee hearing
The AHA provided comments Sept. 30 to the Senate Homeland Security and Governmental Affairs Subcommittee on Disaster Management, District of Columbia and…
Headline
FBI arrests an alleged leader of ShinyHunters cybercriminal group, which has attacked healthcare, other organizations 
The FBI Sept. 29 announced an arrest of one of the alleged leaders of ShinyHunters, a cybercriminal group linked to cyberattacks in the U.S. and…
Headline
Fact sheet highlights ways to reduce risk working with third-party networks for managing critical functions
The FBI and the Cybersecurity and Infrastructure Security Agency have released a fact sheet for critical infrastructure organizations on ways to reduce risk…
Headline
Webinar to share how to better protect medical devices from cyber threats
The AHA will host a webinar Sept. 30 at 1 p.m. ET on ways healthcare organizations can build an effective, closed-loop cybersecurity program designed…
Headline
CISA shares low-cost cybersecurity strategy for hospitals
New guidance from the Cybersecurity and Infrastructure Security Agency encourages healthcare organizations to consider internal network and internet facing…
Headline
NIST, CISA issue guidelines on protecting authentication tools from forgery, theft
The National Institute of Standards and Technology and the Cybersecurity and Infrastructure and Security Agency have released guidelines to protect…