Cause and consequence
Ransomware, both ends
On the left, the way in: vulnerabilities CISA has tied to known ransomware campaigns. On the right, the bill: what ransomware incidents have cost UK organisations once the regulator finished looking. Same story, two halves.
332
vulnerabilities used in ransomware
2
UK enforcement actions
£3.07m
in UK penalties
The way in
- CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC · Windchill and FlexPLM
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools
- CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability Check Point · Security Gateway
- CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability Nx · Nx Console
- CVE-2026-45321 TanStack Unspecified Vulnerability TanStack · TanStack
- CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros · cPanel & WHM and WP2 (WordPress Squared)
- CVE-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise · ScreenConnect
- CVE-2024-57728 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability SimpleHelp · SimpleHelp
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft · Defender
- CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability PaperCut · NG/MF
- CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains · TeamCity
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft · Exchange Server
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools · SmarterMail
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools · SmarterMail
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools · SmarterMail
- CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra · GoAnywhere MFT
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet · FortiOS
- CVE-2025-3248 Langflow Missing Authentication Vulnerability Langflow · Langflow
- CVE-2025-31324 SAP NetWeaver Unrestricted File Upload Vulnerability SAP · NetWeaver
- CVE-2025-29824 Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability CrushFTP · CrushFTP
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy
- CVE-2025-26633 Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft · Windows
- CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability VMware · ESXi
- CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Microsoft · Windows
- CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall · SonicOS
- CVE-2024-57727 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall · SMA1000 Appliances
The bill
- Advanced Computer Software Group Limited The Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd (Advanced) £3.07m for security failings…
- Optionis Group Limited The data controller suffered a ransomware attack, which resulted in the exfiltration of personal data. A reprimand was issued in r…