The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Cyber alerts

3,076 results

October 2026

CC-4876 Medium

Published Wednesday 21 October 2026 (04:00) (updated 21 October 2026)

Oracle Releases October 2026 Critical Patch Update Advisory

Scheduled advisory includes 1,295 security updates across multiple Oracle product families

CC-4875 High

Published Wednesday 21 October 2026 (03:51) (updated 21 October 2026)

Critical Vulnerabilities in PHP (PHP2Shell)

Successful exploitation of CVE-2026-109618 and CVE-2026-109619 could allow an unauthenticated attacker to execute code remotely or access sensitive memory

CC-4874 Medium

Published Tuesday 20 October 2026 (03:28) (updated 20 October 2026)

Active Exploitation of Vulnerability in Siemens Software Center (CVE-2026-110936)

Attackers are abusing Dynamic Link Library (DLL) side-loading in Siemens Software Center to execute malicious code

CC-4873 Medium

Published Monday 19 October 2026 (03:05) (updated 19 October 2026)

Multiple Critical Vulnerabilities in Next.js

Out-of-band security update addresses three vulnerabilities that, if exploited, could result in remote code execution or denial-of-service

CC-4872 Medium

Published Monday 19 October 2026 (01:53) (updated 19 October 2026)

F5 Releases Security Advisory for Critical Vulnerabilities in NGINX Plus and NGINX Open Source

The advisory addresses three vulnerabilities that could allow an unauthenticated remote attacker to cause denial-of-service or potentially achieve remote code execution on affected systems

CC-4871 Medium

Published Friday 16 October 2026 (01:01) (updated 16 October 2026)

Drupal Releases Security Advisory for Drupal Core

Successful exploitation of CVE-2026-108097 could allow an unauthenticated attack to perform remote code execution

CC-4870 High

Published Friday 16 October 2026 (12:07) (updated 16 October 2026)

Active Exploitation of BeyondTrust Remote Support Vulnerability (CVE-2026-102764)

Successful exploitation of CVE-2026-102764 could allow a remote, unauthenticated attacker to upload arbitrary files on affected appliances

CC-4869 Medium

Published Thursday 15 October 2026 (12:28) (updated 15 October 2026)

Cisco Releases Advisory For Critical Vulnerability in Cisco Async OS Affecting Secure Email Gateway

Successful exploitation of CVE-2026-76519 could allow an unauthenticated remote attacker to write arbitrary files and execute commands with root privileges

CC-4868 Medium

Published Thursday 15 October 2026 (12:04) (updated 15 October 2026)

Active Exploitation of Remote Code Execution Vulnerability in Palo Alto Network's PAN-OS

CVE-2026-0322 could allow an authenticated attacker to execute arbitrary code with root privileges on the firewall

CC-4867 Medium

Published Wednesday 14 October 2026 (04:34) (updated 14 October 2026)

Microsoft Releases October 2026 Security Updates

Scheduled security updates for Microsoft products address 1,413 vulnerabilities, including 3 zero-day vulnerabilities