React2Shell (CVE-2025-55182): Vercel Races to Patch a Critical Next.js RCE Flaw
Running Next.js? React2Shell (CVE-2025-55182) enables remote code execution. Here's how Vercel responded and what you need to patch right now.
Incidents
On December 5, Cloudflare stumbled again, taking Zoom and Fortnite down with it. Plus: DownDetectorDownDetector is real, not a meme.

We had barely recovered from the massive November 18 outage when, on December 5, 2025, Cloudflare reminded us once again how much the internet depends on it. This incident was smaller in scale, but users around the world still felt the effects of the infrastructure "hiccup."
The list of affected services reads like a who's who of the digital world. Users reported availability problems, login failures and "500 Internal Server Error" messages on major platforms, including:
Cloudflare officially classified the incident as a "minor outage" affecting its dashboard and some integrations. The issue was fixed within a few hours, and system status returned to normal. So if something still isn't working for you, this time it's probably your provider's fault, not a global router conspiracy.
Technical analysis: Cloudflare explains the cause of the outage: a detailed breakdown of the Lua bug in a legacy proxy that triggered a global shutdown while a React vulnerability was being patched.
The most interesting part of these outages is what happens to DownDetector. It's where we all rush to check whether "it's just me." But when problems hit on this scale, even DownDetector can run out of breath.
This is where things get meta. It sounds like a joke, but it isn't. If you've ever wondered, "What if DownDetector goes down?", the answer already exists: DownDetectorDownDetector. Yes, you read that right. It's a fully functional website that checks whether the outage-checking website is having an outage.
And if you can't reach DownDetectorDownDetector, you can check its status at DownDetectorDownDetectorDownDetector.com.
We live in an age where the internet needs monitoring of its monitoring. Now we're waiting for DownDetectorDownDetectorDownDetectorDownDetector, because in 2025, anything is possible.

Source: Cloudflare Status
Aleksander
Read more
Running Next.js? React2Shell (CVE-2025-55182) enables remote code execution. Here's how Vercel responded and what you need to patch right now.
75,000 posts, a geolocated window view and... a photo of a dog. See how OSINT techniques unmasked the online hater behind "Morgenstern616".
NIS2 isn't another GDPR. Personal board liability and fines up to PLN 100 million. Find out if your company is covered and how to avoid penalties.
A free consultation with one of our experts — no obligation, in full confidence.
Let's talkWe'd like to use Google Analytics cookies to see how many people visit the site and which content is useful. We'll only set them if you agree. You can change your decision at any time via the “Cookie settings” link in the footer. Cookies Policy