Security Advisory: Unauthenticated RCE (CVE-2025-55182) in largifysolutions.com Date: March 07, 2026 Severity: Critical ( CVSS 10.0 ) Status: Un-Patched Researcher: SkelerSecurity Research Team Executive Summary On March 6, 2026, SkelerSecurity identified a critical Remote Code Execution (RCE) vulnerability on the primary web property of Largify Solutions Limited ( largifysolutions.com ). The vulnerability stems from CVE-2025-55182 , colloquially known as React2Shell , which affects specific versions of the React Server Components (RSC) Flight protocol . Due to the presence of this flaw in the site's Next.js App Router implementation, an unauthenticated attacker could execute arbitrary code on the underlying Ubuntu server via crafted HTTP requests. Technical Analysis Vulnerability Context CVE-2025-55182 is a failure in the secure deserialization of RSC payloads. In affected versions of the react-server-dom packages (19.0.0 – 19.2.0), the server-side logic responsible for hyd...
In an age where digital threats evolve faster than the systems meant to prevent them, one mission stands firm: empowering people and protecting innovation. SkelerSecurity was born from a vision not just to defend cyberspace but to redefine how we educate, secure, and evolve within it.