Cyber alerts - NHS England Digital

Published Wednesday 4 March 2026 (02:27) (updated 4 March 2026)

Broadcom Releases Security Update to Address Vulnerabilities in VMware Aria Operations

Security advisory addresses three vulnerabilities that could result in command injection, cross site scripting, and privilege escalation in VMware Aria Operations and Cloud Foundation

CC-4748 High

Published Thursday 26 February 2026 (12:31) (updated 9 March 2026)

Exploitation of Zero-Day Vulnerability in Cisco Catalyst SD-WAN

CVE-2026-20127 could allow an unauthenticated attacker to bypass authentication and gain administrative privileges

CC-4747 Medium

Published Wednesday 18 February 2026 (02:30) (updated 18 February 2026)

Microsoft Releases Critical Advisory for Vulnerability CVE-2026-26119

Microsoft discloses privilege escalation vulnerability in Windows Admin Center

CC-4746 Medium

Published Monday 16 February 2026 (01:18) (updated 16 February 2026)

Google Releases Security Update for CVE-2026-2441

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4745 Medium

Published Thursday 12 February 2026 (03:09) (updated 12 February 2026)

Apple Releases Security Updates for iOS and iPadOS

CVE-2026-20700 is under active exploitation and could lead to arbitrary code execution

CC-4744 Medium

Published Wednesday 11 February 2026 (02:18) (updated 11 February 2026)

Microsoft Releases February 2026 Security Updates

Scheduled updates for Microsoft products address 58 vulnerabilities, including six actively exploited vulnerabilities

CC-4743 High

Published Monday 9 February 2026 (02:36) (updated 12 February 2026)

BeyondTrust Releases Security Advisory for Remote Support and Privileged Remote Access

CVE-2026-1731 could allow an unauthenticated attacker to perform remote code execution

CC-4742 High

Published Friday 30 January 2026 (10:42) (updated 30 January 2026)

Active Exploitation of Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile

Ivanti has addressed two exploited vulnerabilities that could lead to unauthenticated remote code execution

CC-4741 Medium

Published Wednesday 28 January 2026 (01:36) (updated 28 January 2026)

Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass

Successful exploitation could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

CC-4740 Medium

Published Tuesday 27 January 2026 (11:50) (updated 27 January 2026)

Microsoft Releases Out-of-Band Security Update for Microsoft Office

CVE-2026-21509 is under active exploitation and could be used to bypass OLE mitigations in Microsoft 365 and Microsoft Office