PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - You may have seen recent reports about the PHP2Shell vulnerabilities. NESO has carried out checks in line with official guidance and can confirm that we have no evidence of exploitation affecting NESO or customer data. We continue to actively monitor the situation and remain in regular communication with the Government Cyber Coordination Centre.