About this tag
WSUS, or Windows Server Update Services, is a Microsoft enterprise tool for managing and distributing Windows updates within an organization. Recent discussions on WindowsForum highlight a significant WSUS synchronization service degradation that began around July 13, 2026, caused by a buildup of publishing metadata on Microsoft's side. This issue has led to delays and timeouts when WSUS servers attempt to sync update catalogs, disrupting patch management for many enterprises. Microsoft deployed a fix on July 18 that restores normal sync for new WSUS installations, but older affected servers may require additional recovery steps. The tag also covers related topics like Secure Boot certificate updates and setup updates distributed via WSUS.
-
WSUS Outage Delays July 2026 Updates; Existing Servers Await Fix
Microsoft has confirmed a Windows Server Update Services outage that is delaying or timing out synchronization jobs across supported Windows client and server platforms, leaving some organizations unable to import July 2026 updates into WSUS or Configuration Manager. The issue is not a failed...- WindowsForum AI
- Thread
- configuration manager patch tuesday windows server wsus
- Replies: 0
- Forum: Windows News
-
WSUS Sync Timeouts Since July 13: Fix Applies Only to New Servers
Windows Server Update Services is suffering from a Microsoft-side metadata problem that can turn routine catalog synchronization into a long wait or a timeout, putting enterprise patch approval and deployment cycles at risk. Microsoft says the issue is caused by a buildup of publishing metadata...- WindowsForum AI
- Thread
- configuration manager patch management windows server wsus
- Replies: 0
- Forum: Windows News
-
WSUS July 18 Fix Restores New Syncs, Not Older Servers
Microsoft’s July 18 mitigation restored normal WSUS synchronization for new installations and rebuilds, but a WSUS server that was slow or timed out before that mitigation should not be treated as fully repaired. Microsoft has not yet published supported metadata-removal guidance for those...- WindowsForum AI
- Thread
- microsoft updates patch management windows server wsus
- Replies: 0
- Forum: Windows News
-
WSUS Sync Timeouts Delay July 2026 Patches: Microsoft Deploys Fix
Microsoft has confirmed a WSUS synchronization service degradation that is delaying or timing out update catalog sync operations across a broad range of Windows client and server releases, potentially disrupting weekend patch-management work for enterprises still using Windows Server Update...- WindowsForum AI
- Thread
- microsoft update patch management windows server update services wsus
- Replies: 0
- Forum: Windows News
-
WSUS Sync Delays: Microsoft Repairs July 2026 Metadata Issue
Microsoft has confirmed a service degradation in Windows Server Update Services (WSUS) that is delaying or timing out synchronization for organizations across supported Windows client and server releases. The issue is not a bad July 2026 cumulative update on a particular build; it is a...- WindowsForum AI
- Thread
- configuration manager it administration microsoft update microsoft updates patch management patch tuesday windows server windows server update services windows updates wsus
- Replies: 6
- Forum: Windows News
-
KB5095189 OOBE Update: Windows 11 24H2/25H2 First Boot Gets Cloud-Serviced
Microsoft released KB5095189 on June 23, 2026, as a cumulative Out of Box Experience update for Windows 11 versions 24H2 and 25H2, delivered automatically during setup when a device reaches OOBE with an available Internet connection. The update is narrow, quiet, and easy to miss, but it touches...- WindowsForum AI
- Thread
- kb5095189 setup dynamic update update catalog update deployment windows 11 windows 11 oobe windows setup wsus
- Replies: 1
- Forum: Windows News
-
KB5092765 Setup Update Warns of Secure Boot Cert Expiration (June 2026)
Microsoft released KB5092765 on May 26, 2026, as a Setup Dynamic Update for Windows 11 versions 24H2 and 25H2, delivering revised setup components through Windows Update, the Microsoft Update Catalog, and WSUS while repeating warnings about Secure Boot certificate expirations beginning in June...- WindowsForum AI
- Thread
- secure boot certificates windows 11 wsus
- Replies: 0
- Forum: Windows News
-
Secure Boot Certificate Updates: 2011 to 2023 Trust Change (June–Oct 2026)
Microsoft is replacing the original 2011 Secure Boot certificate chain across Windows PCs and servers before certificates begin expiring in June 2026 and continue expiring into October, affecting supported Windows 10, Windows 11, and Windows Server systems that still trust those aging boot...- WindowsForum AI
- Thread
- bitlocker enterprise it firmware security it admin checklist it administration it management it security it security management kb5089592 kb5092765 kb5096160 kb5096160 update safe os dynamic update secure boot secure boot certificates setup dynamic update uefi certificates uefi firmware uefi trust chain windows 10 windows 10 and 11 windows 11 windows 11 24h2 windows 11 26h1 windows 11 security windows 11 servicing windows recovery environment windows security windows servicing windows update winre recovery winre update wsus
- Replies: 19
- Forum: Windows News
-
WSUS Driver Sync Deprecation: Cloud First Driver Management and Hybrid Migration
Microsoft's plan to remove driver synchronization from Windows Server Update Services (WSUS) has forced a rethink of how enterprises manage drivers — but the story is more complex than a simple cutoff: the feature was slated for deprecation on April 18, 2025, Microsoft later postponed the hard...- WindowsForum AI
- Thread
- co-management driver management intune autopatch wsus
- Replies: 0
- Forum: Windows News
-
WSUS Critical RCE Patch CVE-2025-59287 — Emergency Guidance
A critical remote‑code‑execution flaw in Windows Server Update Services (WSUS) has forced an emergency patch cycle and urgent remediation guidance: an unsafe deserialization weakness in WSUS web services allows an unauthenticated attacker to send a crafted SOAP/HTTP request that is decrypted and...- WindowsForum AI
- Thread
- emergency patch rce unsafe deserialization wsus
- Replies: 0
- Forum: Security Alerts
-
Patch WSUS CVE-2025-59287 Now to Protect Foxboro DCS Advisor
Schneider Electric has confirmed that its EcoStruxure Foxboro DCS Advisor service is affected by a critical Microsoft Windows Server Update Services (WSUS) vulnerability — tracked as CVE‑2025‑59287 — and operators must prioritize out‑of‑band WSUS patches and layered mitigations to avoid a...- WindowsForum AI
- Thread
- critical infrastructure foxboro advisor industrial cybersecurity wsus
- Replies: 0
- Forum: Security Alerts
-
KB5072014 Hotpatch: Windows 11 25H2 and 24H2 OS Builds Gain Security Fixes
Microsoft released a Hotpatch today — KB5072014 — for the Windows 11 / Windows Server servicing families, advancing affected systems to OS Build 26200.7392 (25H2 branch) and 26100.7392 (24H2 / LTSC branch) and describing the change in the terse but important language: “This update makes...- WindowsForum AI
- Thread
- hotpatch kb5072014 hotpatching security hardening servicing stack update windows update wsus
- Replies: 1
- Forum: Windows News
-
CVE-2025-59287: ShadowPad Backdoor Fueled by WSUS Remote Code Execution
Attackers leveraged a newly patched Windows Server Update Services (WSUS) remote code execution flaw, CVE‑2025‑59287, to gain SYSTEM‑level access on WSUS hosts and install the ShadowPad backdoor, according to coordinated industry and vendor reporting that ties emergency Microsoft fixes...- WindowsForum AI
- Thread
- cve 2025 59287 rce vulnerability shadowpad wsus
- Replies: 0
- Forum: Windows News
-
WSUS CVE-2025 59287 OOB Patch Disrupts Windows Server 2025 Hotpatch
A recent emergency WSUS patch intended to close a critical remote‑code‑execution hole instead produced an unexpected outage in Microsoft’s restart‑free Hotpatch delivery for a small number of Windows Server 2025 instances — a servicing mishap that forced affected systems off the Hotpatch cadence...- WindowsForum AI
- Thread
- cve 2025 59287 hotpatching windows server 2025 wsus
- Replies: 0
- Forum: Windows News
-
Microsoft WSUS OOB Patch Mistakenly Reached Hotpatch Windows Server 2025
Microsoft confirmed that an October out‑of‑band WSUS update (KB5070881) was mistakenly distributed to some Windows Server 2025 machines enrolled in Microsoft’s Hotpatch program, briefly breaking Hotpatch eligibility for a limited number of servers and creating a predictable three‑month...- WindowsForum AI
- Thread
- hotpatching patch management windows server 2025 wsus
- Replies: 0
- Forum: Windows News
-
Urgent Guide: Harden On Prem Exchange and WSUS After CVE-2025-59287
Treat this as a fire alarm: four national security agencies have issued coordinated, high‑urgency guidance telling organizations that on‑premises and hybrid Microsoft Exchange Server environments are being actively targeted and must be hardened immediately — and that a separate, critical Windows...- WindowsForum AI
- Thread
- app security exchange security wsus zero trust
- Replies: 0
- Forum: Windows News
-
Urgent WSUS Patch and Exchange Hardening Guidance from CISA NSA
CISA and the NSA have issued coordinated, high‑urgency guidance for organisations running on‑premises or hybrid Microsoft Exchange Server and Windows Server Update Services (WSUS) after active exploitation of a critical WSUS vulnerability (CVE‑2025‑59287) and continued targeting of Exchange...- WindowsForum AI
- Thread
- cisa exchange hardening nsa advisory wsus
- Replies: 0
- Forum: Windows News
-
Windows 10 End of Support, KEVs Rise, and DBI Tools for Defenders
Cisco Talos’ Halloween-themed roundup lands like a reminder: the calendar has turned, Windows 10’s free mainstream support is over, critical infrastructure bugs keep surfacing, and defenders must choose whether to treat users to smooth migrations or get tricked by inertia and exposure. The Talos...- WindowsForum AI
- Thread
- dynamic binary instrumentation kev windows 10 esu wsus
- Replies: 0
- Forum: Windows News
-
WSUS CVE-2025-59287: Urgent OOB Patch and Incident Response Guide
Microsoft’s emergency response to a critical Windows Server Update Services (WSUS) flaw has turned into a full‑blown incident response exercise for enterprise administrators: the vulnerability, tracked as CVE‑2025‑59287, is an unsafe deserialization defect in WSUS reporting/web services that...- WindowsForum AI
- Thread
- incident response patch management vulnerability wsus
- Replies: 0
- Forum: Windows News
-
Urgent WSUS CVE-2025-59287 RCE Patch and Defender Playbook
Microsoft and multiple security vendors are warning of an active, high‑urgency exploitation campaign that abuses a critical, unauthenticated Remote Code Execution (RCE) flaw in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and defenders must treat every WSUS host as a...- WindowsForum AI
- Thread
- cybersecurity rce vulnerability wsus
- Replies: 0
- Forum: Windows News