JACKPOT PANDA

Reports per quarter

CVEs named in reports

• CVE-2025-1338
• CVE-2025-55182 KEV ransomware
• CVE-2025-55183
• CVE-2025-55184
• CVE-2025-66478
• CVE-2025-67779

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 19 December 2025

   Multiple Threat Actors Leveraging CVE-2025-55182 (React2Shell)

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Multiple Threat Actors Leveraging CVE-2025-55182 (React2Shell)

2. 12 December 2025

   Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)

3. 4 December 2025

   China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | Amazon Web Services

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | Amazon Web Services

Newest first. Details opens the report in Explore.