Cloudforce One sees active exploitation of React2Shell, with actors targeting critical infrastructure—including nuclear fuel and uranium operations. Probing is concentrated in Taiwan, Xinjiang, Vietnam, Japan, and New Zealand.

React also disclosed two new vulnerabilities (CVE-2025-55183 and CVE-2025-55184). Cloudflare customers are protected against all three flaws.

Read the full threat brief: blog.cloudflare.com/react2shel

0

If you have a fediverse account, you can quote this note from your own instance. Search https://noc.social/users/cloudflare/statuses/115707344914483355 on your instance and quote it. (Note that quoting is not supported in Mastodon.)