Cyber alerts - NHS England Digital

CC-4742 High

Published Friday 30 January 2026 (10:42) (updated 30 January 2026)

Active Exploitation of Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile

Ivanti has addressed two exploited vulnerabilities that could lead to unauthenticated remote code execution

CC-4744 Medium

Published Wednesday 11 February 2026 (02:18) (updated 11 February 2026)

Microsoft Releases February 2026 Security Updates

Scheduled updates for Microsoft products address 58 vulnerabilities, including six actively exploited vulnerabilities

CC-4743 High

Published Monday 9 February 2026 (02:36) (updated 12 February 2026)

BeyondTrust Releases Security Advisory for Remote Support and Privileged Remote Access

CVE-2026-1731 could allow an unauthenticated attacker to perform remote code execution

CC-4745 Medium

Published Thursday 12 February 2026 (03:09) (updated 12 February 2026)

Apple Releases Security Updates for iOS and iPadOS

CVE-2026-20700 is under active exploitation and could lead to arbitrary code execution

CC-4746 Medium

Published Monday 16 February 2026 (01:18) (updated 16 February 2026)

Google Releases Security Update for CVE-2026-2441

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4747 Medium

Published Wednesday 18 February 2026 (02:30) (updated 18 February 2026)

Microsoft Releases Critical Advisory for Vulnerability CVE-2026-26119

Microsoft discloses privilege escalation vulnerability in Windows Admin Center

CC-4748 High

Published Thursday 26 February 2026 (12:31) (updated 9 March 2026)

Exploitation of Zero-Day Vulnerability in Cisco Catalyst SD-WAN

CVE-2026-20127 could allow an unauthenticated attacker to bypass authentication and gain administrative privileges

CC-4749 Medium

Published Wednesday 4 March 2026 (02:27) (updated 4 March 2026)

Broadcom Releases Security Update to Address Vulnerabilities in VMware Aria Operations

Security advisory addresses three vulnerabilities that could result in command injection, cross site scripting, and privilege escalation in VMware Aria Operations and Cloud Foundation

CC-4751 Medium

Published Monday 9 March 2026 (04:39) (updated 9 March 2026)

PAC4J Releases Security Updates for pac4j-jwt module

A critical vulnerability could allow remote attackers to forge authentication tokens

CC-4752 Medium

Published Wednesday 11 March 2026 (01:16) (updated 11 March 2026)

Exploitation of Ivanti Endpoint Manager Vulnerability

Authentication bypass vulnerability CVE-2026-1603 could allow an unauthenticated, remote attacker to leak specific stored credential data