Cloudflare’s recent outage was caused by an emergency patch for a critical React Server Components vulnerability, which was actively exploited in attacks. Multiple hacking groups have begun exploiting this flaw, escalating the urgency for affected organizations to respond. #React2Shell #ReactVulnerability
Keypoints
- Cloudflare experienced a major global outage due to an emergency security patch.
- The outage was linked to a change in how Cloudflare’s Web Application Firewall parses requests.
- The patched vulnerability, CVE-2025-55182, allows remote code execution via React Server Components.
- China-linked hacking groups, including Earth Lamia and Jackpot Panda, are actively exploiting the flaw.
- Security experts warn that continued exploitation of React2Shell is highly likely and impacts several React versions.