Independent investigation concludes allegations against…
19 Oct 2026 - 3 minute read
Security Advisory
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - You may have seen recent reports about the PHP2Shell vulnerabilities. NESO has carried out checks in line with official guidance and can confirm that we have no evidence of exploitation affecting NESO or customer data. We continue to actively monitor the situation and remain in regular communication with the Government Cyber Coordination Centre.
Sign in to add this page to your favourites
Sign in or registerSign in or register to manage your favourites
Sign in or register
External Whistleblowing investigation
Following whistleblower allegations regarding operational decision-making and record-keeping within NESO, an independent external investigation has been launched led by Eversheds Sutherland International. The terms of reference for this investigation have now been published.
Eversheds Sutherland International will report to an independent panel, chaired by an independent Non-Executive Director of the NESO Board. Any NESO employee will be able to reach out directly to Eversheds Sutherland International with full anonymity if they believe they have information relevant to this investigation.
Ofgem commissioned operational review
Ofgem has also used its regulatory powers under Condition C7.5 of the ESO Licence to formally commission NESO to deliver post-event analysis and assessment of the incidents of system stress during extreme heat across the week of 22 June.
This will cover how the system performed under extreme heat, system conditions and operational decisions, including compliance with all relevant security standards and lessons for the future.
The Terms of Reference for this review are also published on Ofgem’s website.