Innovation in Action: The groundbreaking ideas tackling…
31 Jul 2026 - 2 minute read
Security Advisory
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - You may have seen recent reports about the PHP2Shell vulnerabilities. NESO has carried out checks in line with official guidance and can confirm that we have no evidence of exploitation affecting NESO or customer data. We continue to actively monitor the situation and remain in regular communication with the Government Cyber Coordination Centre.
Sign in to add this page to your favourites
Sign in or registerSign in or register to manage your favourites
Sign in or register
As requested by the Department of Energy Security and Net Zero (DESNZ), the National Energy System Operator (NESO) analysed the impact on Great Britain's electricity system covering the period 2027 to 2031, if bespoke support for large-scale biomass generation at Drax (2.5 GW capacity) and Lynemouth (0.4 GW capacity) was withdrawn from 2027.
NESO's analysis identified that having large-scale biomass available in this period could have a significant impact in mitigating potential risks to electricity security of supply and could also support the delivery of Clean Power by 2030. The analysis showed that without large-scale biomass, security of supply would not be ensured in scenarios with additional supply losses. While alternative options could deliver the same outcomes, these options have greater delivery risks.
The announcement from the Department for Energy Security and Net Zero is available on the Parliament Website and the outcome of the consultation on this issue is available on the Government's Website.