Cyber Alert Feed

CC-4776 - Active Exploitation of Local Privilege Escalation Vulnerability in the Linux Kernel

enquiries@nhsdigital.nhs.uk (NHS Digital) — Thu, 30 Apr 2026 15:32:00 GMT

Severity: Medium

CVE-2026-31431 (dubbed "Copy Fail") affects all Linux kernel builds since 2017, and could allow a local, unprivileged attacker to escalate privileges to root.

Updated: 05 May 2026

CC-4775 - SonicWall Releases Security Updates for SonicOS

enquiries@nhsdigital.nhs.uk (NHS Digital) — Thu, 30 Apr 2026 12:15:00 GMT

Severity: Medium

CVE-2026-0204 could allow an unauthenticated attacker to access certain management interface functions

Updated: 30 Apr 2026

CC-4774 - Critical Vulnerability in cPanel and Web Host Manager (WHM)

enquiries@nhsdigital.nhs.uk (NHS Digital) — Thu, 30 Apr 2026 10:34:00 GMT

Severity: High

CVE-2026-41940 could allow unauthenticated remote attackers to gain unauthorised access to the affected cPanel management console

CVE-2026-41940 could allow unauthenticated remote attackers to gain unauthorised access on the affected cPanel management console

Updated: 30 Apr 2026

CC-4771 - Microsoft Releases April 2026 Security Updates

enquiries@nhsdigital.nhs.uk (NHS Digital) — Wed, 15 Apr 2026 14:48:00 GMT

Severity: Medium

Scheduled updates for Microsoft products address 165 vulnerabilities, including CVE‑2026‑32201, an exploited spoofing vulnerability affecting SharePoint Server

Updated: 24 Apr 2026

CC-4773 - Oracle Releases April 2026 Critical Patch Update Advisory

enquiries@nhsdigital.nhs.uk (NHS Digital) — Wed, 22 Apr 2026 12:16:00 GMT

Severity: Medium

Scheduled advisory includes 481 security updates across multiple Oracle product families

Updated: 22 Apr 2026

CC-4772 - Cisco Releases Security Advisories for Critical Vulnerabilities in Identity Services Engine

enquiries@nhsdigital.nhs.uk (NHS Digital) — Thu, 16 Apr 2026 13:03:00 GMT

Severity: Medium

An authenticated attacker could exploit the vulnerabilities to achieve remote code execution

Updated: 16 Apr 2026

CC-4770 - Axios Releases Security Update to Address Critical Vulnerability

enquiries@nhsdigital.nhs.uk (NHS Digital) — Tue, 14 Apr 2026 10:47:00 GMT

Severity: Medium

CVE‑2026‑40175 could be used in an attack chain to allow for remote code execution or full cloud compromise

Updated: 14 Apr 2026

CC-4769 - Adobe Releases Security Update to Address a Vulnerability in Acrobat and Reader

enquiries@nhsdigital.nhs.uk (NHS Digital) — Mon, 13 Apr 2026 13:37:00 GMT

Severity: Medium

CVE‑2026‑34621 could allow arbitrary code execution via malicious PDF files opened in vulnerable Adobe Acrobat or Reader installations.

Updated: 13 Apr 2026

CC-4768 - Mitel Releases Security Advisory for MiCollab

enquiries@nhsdigital.nhs.uk (NHS Digital) — Thu, 09 Apr 2026 12:20:00 GMT

Severity: Medium

A critical SQL injection vulnerability could allow a remote unauthenticated attacker to access system information and execute arbitrary SQL database commands

Updated: 09 Apr 2026

CC-4767 - Progress Releases Security Updates for ShareFile Storage Zones Controller (SZC)

enquiries@nhsdigital.nhs.uk (NHS Digital) — Tue, 07 Apr 2026 15:03:00 GMT

Severity: Medium

Successful exploitation could allow an unauthenticated remote attacker to access on-prem storage zones controller’s configuration pages, potentially leading to changes in system configuration and remote code execution

Updated: 07 Apr 2026