Next.js

HTB Reactor: CVE-2025-55182 + Node.js Debug RCE

A critical RCE vulnerability in Next.js React Server Components (CVE-2025-55182) provides initial access. A misconfigured Node.js debugger bound to localhost enables privilege escalation to root.