The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Cyber alerts

3,081 results

October 2026

CC-4881 Medium

Published Friday 23 October 2026 (02:28) (updated 23 October 2026)

Node.js Releases Security Updates Addressing Multiple Vulnerabilities

Four high severity vulnerabilities identified, including CVE-2026-111497, an out-of-bounds write vulnerability that could allow remote code execution

CC-4880 Medium

Published Friday 23 October 2026 (02:18) (updated 23 October 2026)

eMudhra Intermediate Certificates Compromised

An attacker with access to the private key of any compromised intermediate certificates could impersonate any website or service

CC-4879 Medium

Published Friday 23 October 2026 (01:00) (updated 23 October 2026)

Fortinet Releases Security Hardening Release for Multiple Products

Fortinet releases security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator

CC-4878 Medium

Published Thursday 22 October 2026 (02:44) (updated 22 October 2026)

Cisco Releases Security Hardening Guidance for Multiple Cisco Products

The critical advisory addresses multiple vulnerability classes affecting multiple Cisco products

CC-4877 Medium

Published Thursday 22 October 2026 (02:41) (updated 22 October 2026)

Cisco Releases Security Hardening Update for Unified Communications Products

Critical advisory addresses multiple vulnerability classes affecting Cisco Unified Communications products

CC-4876 Medium

Published Wednesday 21 October 2026 (04:00) (updated 21 October 2026)

Oracle Releases October 2026 Critical Patch Update Advisory

Scheduled advisory includes 1,295 security updates across multiple Oracle product families

CC-4875 High

Published Wednesday 21 October 2026 (03:51) (updated 21 October 2026)

Critical Vulnerabilities in PHP (PHP2Shell)

Successful exploitation of CVE-2026-109618 and CVE-2026-109619 could allow an unauthenticated attacker to execute code remotely or access sensitive memory

CC-4874 Medium

Published Tuesday 20 October 2026 (03:28) (updated 20 October 2026)

Active Exploitation of Vulnerability in Siemens Software Center (CVE-2026-110936)

Attackers are abusing Dynamic Link Library (DLL) side-loading in Siemens Software Center to execute malicious code

CC-4873 Medium

Published Monday 19 October 2026 (03:05) (updated 19 October 2026)

Multiple Critical Vulnerabilities in Next.js

Out-of-band security update addresses three vulnerabilities that, if exploited, could result in remote code execution or denial-of-service

CC-4872 Medium

Published Monday 19 October 2026 (01:53) (updated 19 October 2026)

F5 Releases Security Advisory for Critical Vulnerabilities in NGINX Plus and NGINX Open Source

The advisory addresses three vulnerabilities that could allow an unauthenticated remote attacker to cause denial-of-service or potentially achieve remote code execution on affected systems