Independent investigation concludes allegations against…
19 Oct 2026 - 3 minute read
Security Advisory
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - You may have seen recent reports about the PHP2Shell vulnerabilities. NESO has carried out checks in line with official guidance and can confirm that we have no evidence of exploitation affecting NESO or customer data. We continue to actively monitor the situation and remain in regular communication with the Government Cyber Coordination Centre.
Sign in to add this page to your favourites
Sign in or registerSign in or register to manage your favourites
Sign in or register
NESO has extended an existing contract with Palantir to maintain continuity of services that support our connections and skip rates work while we develop and procure a longer-term solution.
National Grid ESO put the original contract in place in March 2023, before NESO was established as a public corporation in October 2024. It transferred to NESO when it separated from National Grid.
This extension is an interim arrangement to avoid disruption to existing services and does not determine the future supplier. NESO is taking forward a competitive route for a strategic solution.
We recognise the importance of transparency in public procurement and will continue to provide clear updates as this work progresses.