Cause and consequence
Ransomware, both ends
On the left, the way in: vulnerabilities CISA has tied to known ransomware campaigns. On the right, the bill: what ransomware incidents have cost UK organisations once the regulator finished looking. Same story, two halves.
360
vulnerabilities used in ransomware
2
UK enforcement actions
£3.07m
in UK penalties
The way in
- CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability Broadcom · VMware vCenter
- CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint Server
- CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC · Windchill and FlexPLM
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools
- CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability Check Point · Security Gateway
- CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability Nx · Nx Console
- CVE-2026-45321 TanStack Unspecified Vulnerability TanStack · TanStack
- CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros · cPanel & WHM and WP2 (WordPress Squared)
- CVE-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise · ScreenConnect
- CVE-2024-57728 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability SimpleHelp · SimpleHelp
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft · Defender
- CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability PaperCut · NG/MF
- CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains · TeamCity
- CVE-2025-60710 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft · Exchange Server
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools · SmarterMail
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools · SmarterMail
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools · SmarterMail
- CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra · GoAnywhere MFT
- CVE-2025-8088 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability Microsoft · SharePoint
- CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability Microsoft · SharePoint
- CVE-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet · FortiOS
- CVE-2025-42999 SAP NetWeaver Deserialization Vulnerability SAP · NetWeaver
- CVE-2025-3248 Langflow Missing Authentication Vulnerability Langflow · Langflow
The bill
- Advanced Computer Software Group Limited The Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd (Advanced) £3.07m for security failings…
- Optionis Group Limited The data controller suffered a ransomware attack, which resulted in the exfiltration of personal data. A reprimand was issued in r…