Cyber alerts - NHS England Digital

Published Wednesday 15 July 2026 (11:04) (updated 15 July 2026)

Critical Vulnerabilities in SonicWall SMA1000 Series Appliances Exploited

Zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 may enable compromise of SonicWall SMA1000 appliances

Published Monday 20 July 2026 (11:35) (updated 20 July 2026)

Critical Vulnerability Chain in WordPress Core Under Exploitation (wp2shell)

Successful exploitation of CVE-2026-63030 and CVE-2026-60137 could allow an unauthenticated attacker to execute code remotely

CC-4816 High

Published Monday 20 July 2026 (12:00) (updated 20 July 2026)

Exploitation of Critical Vulnerability in Microsoft SharePoint Server

Successful exploitation of CVE-2026-58644 could allow an unauthenticated attacker to execute code remotely

CC-4817 Medium

Published Monday 20 July 2026 (02:06) (updated 20 July 2026)

F5 Releases Security Advisory for Critical Vulnerability in NGINX and NGINX Plus

Successful exploitation of CVE-2026-42533 could allow an unauthenticated remote attacker to cause a denial-of-service condition or potentially achieve remote code execution on a targeted system

CC-4818 High

Published Wednesday 22 July 2026 (11:56) (updated 22 July 2026)

Critical Vulnerability CVE-2026-50522 in Microsoft SharePoint Server Under Exploitation

Successful exploitation of CVE-2026-50522 could allow an unauthenticated attacker to execute code remotely

CC-4819 Medium

Published Wednesday 22 July 2026 (01:12) (updated 22 July 2026)

Oracle Releases July 2026 Critical Patch Update Advisory

Scheduled advisory includes 1449 security updates across multiple Oracle product families

CC-4820 Medium

Published Thursday 23 July 2026 (11:29) (updated 23 July 2026)

Check Point Releases Security Update for Critical Authentication Bypass Vulnerability

CVE-2026-16232 could allow unauthenticated remote attackers to obtain full administrative access to exposed management servers.

CC-4822 Medium

Published Thursday 30 July 2026 (01:53) (updated 30 July 2026)

Cisco Releases Security Advisory for Vulnerability in Secure Firewall Management Center

Successful exploitation of CVE-2026-20316 could allow an unauthenticated remote attacker to log into an affected device using a low-privileged account and access sensitive information

CC-4796 Medium

Published Wednesday 10 June 2026 (11:49) (updated 23 July 2026)

Microsoft Releases June 2026 Security Updates

Scheduled updates for Microsoft products address 206 vulnerabilities

CC-4824 Medium

Published Thursday 6 August 2026 (04:04) (updated 6 August 2026)

Cisco Releases IOS XE Software Security Hardening Guidance

The critical advisory addresses multiple vulnerability classes affecting Cisco Catalyst IOS XE deployments