Cyber alerts - NHS England Digital

Published Monday 21 July 2025 (01:12) (updated 22 July 2025)

Critical Vulnerabilities in Microsoft SharePoint Server Under Zero-Day Exploitation

CVE-2025-53770 and CVE-2025-53771 could allow a remote unauthenticated attacker to execute arbitrary code and disclose sensitive information

CC-4685 Medium

Published Thursday 24 July 2025 (02:40) (updated 24 July 2025)

Mitel Releases Security Advisories for MiVoice MX-One and MiCollab

A critical authentication bypass vulnerability could allow a remote unauthenticated attacker to gain unauthorised access to user or admin accounts

CC-4675 Medium

Published Thursday 26 June 2025 (04:59) (updated 23 July 2025)

Cisco Releases Security Advisory Affecting Cisco Identity Service Engine

Advisory addresses three critical severity vulnerabilities in Cisco Identity Service Engine which could lead to remote code execution

CC-4687 Medium

Published Wednesday 6 August 2025 (01:46) (updated 6 August 2025)

Critical RCE Vulnerabilities in Trend Micro Apex One

Trend Micro reports active exploitation of management console command injection RCE vulnerability

CC-4686 High

Published Tuesday 5 August 2025 (11:52) (updated 7 August 2025)

Active Exploitation of Gen 7 SonicWall Firewalls with SSL VPN Enabled

SonicWall has released and updated a security notice regarding recent reported cyber incidents involving SonicWall Gen 7 Firewalls

CC-4688 Medium

Published Friday 8 August 2025 (02:38) (updated 8 August 2025)

Microsoft Releases Security Advisory for Vulnerability CVE-2025-53786 in Exchange Hybrid Deployments

Successful exploitation of CVE-2025-53786 could allow an attacker to escalate privileges within the organisation’s connected cloud environment

CC-4689 Medium

Published Monday 11 August 2025 (01:53) (updated 11 August 2025)

Exploitation of WinRAR Vulnerability CVE-2025-8088

Exploitation of vulnerability in RARLab's WinRAR could allow an attacker to execute arbitrary code

CC-4691 Medium

Published Wednesday 13 August 2025 (02:30) (updated 13 August 2025)

Fortinet Releases Security Advisory for Authentication Bypass Vulnerability

CVE-2024-26009 could allow an unauthenticated attacker to perform full device compromise

CC-4692 Medium

Published Thursday 14 August 2025 (01:52) (updated 14 August 2025)

N-able Releases Critical Security Update for N-central

Updates address two vulnerabilities that have been added to the Known Exploited Vulnerabilities Catalog

CC-4693 Medium

Published Friday 15 August 2025 (12:12) (updated 15 August 2025)

Cisco Releases August 2025 ASA, FMC, and FTD Software Security Advisory Bundled Publication

21 advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication