Rsc — PoC Archivehttps://poc.intelseclab.com/tags/rsc/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000React Server Components Flight-Protocol Prototype Pollution RCE — "React2Shell" (CVE-2025-55182)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-55182-react-server-components-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-55182-react-server-components-rce/Critical severity (CVSS 10) — web · CVE-2025-55182. Status: PoC. Affects: React Server Components (RSC) packages using the Flight protocol (commonly deployed via Next.js). Tags: react, react-server-components, rsc, flight-protocol, prototype-pollution, deserialization, unauthenticated-rce, nextjs, nodejs, python.webCriticalreactreact-server-componentsrscflight-protocolprototype-pollutiondeserializationunauthenticated-rcenextjsnodejspythonReact2Shell - Next.js RSC Unauthenticated RCEhttps://poc.intelseclab.com/pocs/web/2026-05-17_react2shell-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_react2shell-rce/Critical severity (CVSS 10) — web · CVE-2025-55182. Status: Weaponized. Affects: Next.js (App Router with React Server Components), React. Tags: RCE, Next.js, React, RSC, deserialization, prototype-pollution, unauthenticated, Node.js, cloud.webCriticalRCENext.jsReactRSCdeserializationprototype-pollutionunauthenticatedNode.jscloudNext.js RSC Server-Action DoS via Flight Deserialization (CVE-2026-23870)https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/High severity (CVSS 7.5) — web · CVE-2026-23870. Status: Weaponized. Affects: Next.js App Router (React server-action / RSC reply parser). Tags: DoS, RSC, React-Flight, deserialization, cyclic-payload, Next.js, App-Router, unauthenticated, pre-auth.webHighDoSRSCReact-Flightdeserializationcyclic-payloadNext.jsApp-Routerunauthenticatedpre-authNext.js RSC Response Cache Poisoning (CVE-2026-44576)https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-response-cache-poisoning/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-response-cache-poisoning/Medium severity (CVSS 5.4) — web · CVE-2026-44576. Status: Weaponized. Affects: Next.js App Router deployments using React Server Components (RSC) behind shared caches. Tags: cache-poisoning, RSC, response-confusion, Next.js, shared-cache, unauthenticated.webMediumcache-poisoningRSCresponse-confusionNext.jsshared-cacheunauthenticatedNext.js RSC Cache-Busting Weak Hash Collision (CVE-2026-44582)https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-cache-busting-weak-hash-collision/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-cache-busting-weak-hash-collision/Low severity (CVSS 3.7) — web · CVE-2026-44582. Status: Weaponized. Affects: Next.js App Router. Tags: cache-poisoning, RSC, weak-hash, Next.js, unauthenticated.webLowcache-poisoningRSCweak-hashNext.jsunauthenticatedNext.js App Router Segment-Prefetch Middleware Bypass (CVE-2026-44575)https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44575. Status: Weaponized. Affects: Next.js App Router applications that rely on middleware.ts matchers to protect routes. Tags: authorization-bypass, middleware-bypass, App-Router, segment-prefetch, RSC, Next.js, unauthenticated.webHighauthorization-bypassmiddleware-bypassApp-Routersegment-prefetchRSCNext.jsunauthenticated