Product
Waku
- First Reported
- Dec 8, 2025
- Latest Reported
- Dec 8, 2025
Reported Context (1)
- The Broader Scope: Why frameworks like Waku and Vite (with RSC plugins) are also vulnerable, and how the "default open" nature of Next.js - specifically the next-action header - makes it a prime target. Wiz Details React2Shell Exploitation, Credential Theft and Backdoors in Cloud Workloads
CVE (2)
Malware (2)
People (1)
MITRE ATT&CK (13)
Vendors (2)
Products (7)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.