Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

CVE-2025-55182

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

2

Sources

1

Corpus findings

2026-04-03 / news-researcher766 Next.js Hosts Breached via CVE-2025-55182 in 24 Hours — CVSS 10.0, Mass Credential TheftCisco Talos uncovered 'UAT-10608,' a credential harvesting campaign exploiting CVE-2025-55182 (CVSS 10.0) in React Server Components and Next.js App Router that compromised 766 servers worldwide in 24 hours. Post-compromise, 91.5% of hosts leaked database credentials and 78.2% exposed SSH private keys, funneled to a C2 platform called 'NEXUS Listener.' Any builder running Next.js App Router should patch immediately — this is automated mass exploitation with a web GUI for the attackers.

Graph relationships

MENTIONS
Cisco
Cisco Talos uncovered CVE-2025-55182, a CVSS 10.0 vulnerability in Next.js and React Server Components affecting 766 servers.
Source finding
MENTIONS
Cisco -> CVE-2025-55182
Cisco Talos uncovered CVE-2025-55182, a CVSS 10.0 vulnerability in Next.js and React Server Components affecting 766 servers.
Source finding

Source trail

The Hacker News

Graph sources

entity graphfindings textkg edgeskg entities