Cyber alerts - NHS England Digital

CC-4743 High

Published Monday 9 February 2026 (02:36) (updated 12 February 2026)

BeyondTrust Releases Security Advisory for Remote Support and Privileged Remote Access

CVE-2026-1731 could allow an unauthenticated attacker to perform remote code execution

CC-4742 High

Published Friday 30 January 2026 (10:42) (updated 30 January 2026)

Active Exploitation of Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile

Ivanti has addressed two exploited vulnerabilities that could lead to unauthenticated remote code execution

CC-4741 Medium

Published Wednesday 28 January 2026 (01:36) (updated 28 January 2026)

Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass

Successful exploitation could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

CC-4740 Medium

Published Tuesday 27 January 2026 (11:50) (updated 27 January 2026)

Microsoft Releases Out-of-Band Security Update for Microsoft Office

CVE-2026-21509 is under active exploitation and could be used to bypass OLE mitigations in Microsoft 365 and Microsoft Office

CC-4738 High

Published Thursday 22 January 2026 (04:48) (updated 22 January 2026)

Cisco Releases Critical Security Update for Unified Communications Products

Cisco reports RCE vulnerability CVE-2026-20045 has had exploitation attempts in the wild

CC-4739 Medium

Published Thursday 22 January 2026 (04:26) (updated 22 January 2026)

Oracle Releases Security Advisory to Address a Critical Vulnerability in Oracle Fusion Middleware

Successful exploitation could allow an unauthenticated attacker with HTTP network access to create, delete, or modify critical data accessible through the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug‑in

CC-4737 Medium

Published Friday 16 January 2026 (03:24) (updated 16 January 2026)

Palo Alto Networks Releases Security Update for PAN-OS

Palo Alto Networks releases security update for PAN-OS to address a high severity vulnerability that could result in a denial-of-service condition

CC-4736 Medium

Published Wednesday 14 January 2026 (01:34) (updated 14 January 2026)

Fortinet Releases Security Updates for FortiOS and FortiSwitch Manager

Advisory addresses a vulnerability which if exploited could allow a remote unauthenticated attacker to perform arbitrary code or command execution

CC-4735 Medium

Published Wednesday 14 January 2026 (01:27) (updated 14 January 2026)

Microsoft Releases January 2026 Security Updates

Scheduled updates for Microsoft products address 112 vulnerabilities, including an exploited information disclosure vulnerability and 2 others that have been publicly disclosed

CC-4734 Medium

Published Tuesday 30 December 2025 (09:42) (updated 30 December 2025)

CVE-2025-14847 in MongoDB Under Exploitation

A vulnerability in MongoDB could allow a remote attacker to extract secrets, credentials or other sensitive data