Executive Summary In this article, we disclose a new high severity unauthenticated remote denial”‘of”‘service vulnerability we identified and reported in React Server Components that we’ve dubbed “React2DoS”. In this blog, we’ll analyze its impact and place it in the broader context of recently found Flight protocol vulnerabilities, especially CVE”‘2026″‘23864. Introduction We are in a phase…
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2026/04/react2dos-cve-2026-23869-when-the-flight-protocol-crashes-at-takeoff/
![]()

