Cloudflare Outage Traced to Emergency React2Shell Patch Deployment

**Executive summary:** Cloudflare experienced a ~25-minute global outage after deploying a WAF change to mitigate CVE-2025-55182 (React2Shell), a CVSS 10.0 RCE in React Server Components; the flaw affects React 19.0–19.2.0, Next.js, and related frameworks, has public PoCs, and was reported exploited by China-linked groups (Earth Lamia, Jackpot Panda), prompting urgent patching and WAF rule deployment.