CVE-2026-23864 - Vulnerability Details

Related Threat Clusters

• Critical Vulnerabilities in React and Next.js Require Immediate Updates

  Multiple critical vulnerabilities affecting React Server Components and .js have been disclosed, including denial of service, server-side request forgery, and middleware bypass issues. These flaws impact versions 13.x…

  10 articles · Updated May 8, 2026
• Critical Vulnerabilities in React Server Components Enable DoS Attacks

  Multiple critical vulnerabilities have been disclosed in React Server Components, allowing attackers to execute Denial-of-Service (DoS) attacks. The vulnerabilities, tracked as CVE-2026-23864 with a CVSS score of 7.5,…

  1 article · Updated January 27, 2026

Recent Intelligence Reports

• WAF and framework adapter mitigations for React and Next.js vulnerabilities · Changelog — Developers.Cloudflare · May 8, 2026
• Multiple Vulnerabilities in React Server Components Enable DoS Attacks — Cybersecuritynews · January 27, 2026

Related Entities