Microsoft patched CVE-2026-69730, a CVSS 9.8 remote code execution flaw in the Windows DNS Server role reachable with one unauthenticated packet to port 53. In most Active Directory shops that role runs on the domain controller, so the box answering on port 53 also holds the identity database.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence40
The September 2026 security updates left File History unable to create or update backups on Windows 10 21H2 and later and Windows 11 23H2 and later. The fix ships in an optional preview update; machines on mandatory updates wait until October 13.
Reality
- Evidence58
- Adoption30
- Hype gap+14
- Incentives58
- Confidence57
Defender Antivirus 4.18.26080.4 fixes notifications that told users the antivirus was off while it was still scanning. The bug reached every supported Windows client and server build and had been visible in Release Preview since June.
Reality
- Evidence72
- Adoption55
- Hype gap−8
- Incentives45
- Confidence74
Microsoft says it is investigating reports that the update leaves domain-joined Windows 11 25H2 machines rejecting valid credentials after reboot, and administrators are pointing at Machine Identity Isolation in enforcement mode.
Reality
- Evidence62
- Adoption28
- Hype gap+12
- Incentives30
- Confidence58
Microsoft's release health note says RDP connections can fail after several minutes and servers can hang at the Remote Desktop Configuration screen. Group Policy mitigations cover ten build families while a permanent fix is still in work.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 62%
- Investor
- Investor 10%
Reality
- Evidence78
- Adoption62
- Hype gap+12
- Incentives58
- Confidence76
Admins on Server 2019, 2022 and 2025 report sessions dropping and new logins hanging within a day of the September cumulative updates. The only remedy anyone has confirmed is removing them, and Microsoft has not commented.
Reality
- Evidence40
- Adoption45
- Hype gap+12
- Incentives35
- Confidence52
KB5120998 carries 35 quality changes and no security fixes, which puts the real deadline in September. The parts worth testing before then are the taskbar and Start menu rework and the removal of WMIC.
Reality
- Evidence62
- Adoption30
- Hype gap−10
- Incentives42
- Confidence58
KB5121003 shipped Secure Boot changes alongside fixes for 400 vulnerabilities. Microsoft now says it is checking whether the same update stops software from running on 24H2 and 25H2.
Reality
- Evidence58
- Adoption42
- Hype gap+18
- Incentives45
- Confidence62