Digital.Nhs.Uk Multiple Vulnerabilities Exploited in Cybersecurity Threats
Article Content
Browse articles 
Recent advisories detail multiple vulnerabilities affecting various software products. CVE-2026-21509, published on January 26, 2026, is under active exploitation and could allow unauthenticated remote code execution. Additionally, CVE-2026-20045, published on January 21, 2026, is also noted for its active exploitation, impacting Microsoft 365 and Office applications.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
Timeline
2025-08-06
CVE-2025-53786 published
2025-12-19
CVE-2025-14733 published
2026-01-21
CVE-2026-20045 published and added to CISA KEV
2026-01-22
First public PoC for CVE-2026-20045
2026-01-26
CVE-2026-21509 published and added to CISA KEV
2026-01-27
First public PoC for CVE-2026-21509
2026-02-10
Cisco ASA and FMC Software advisories published
More articles in this cluster (5)
Following this threat?
Track CVE-2024-26009 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PEERSTITCH Malware Compromises 500+ Firewalls via FortiManager Exploits In September 2024, a multi-stage network intrusion targeted a telecommunications managed service provider, leading to the compromise of over 500 FortiGate firewalls. The attackers exploited CVE-2024-47575, a critical vulnerability in FortiManager, to gain unauthorized access and exfiltrate sensitive configuration… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…