Affected Systems
Windows 10 21H2/22H2, Windows 11 24H2/25H2/26H1, Windows Server 2019/2022/2025. Remote Desktop Services, Hyper-V (HCS-managed VMs with Plan9 shares), and USB Audio Class 1.0 devices with multichannel audio affected by September 2026 security updates.
Exploitation Status
No exploitation. This is a regression introduced by Microsoft's September 2026 security updates causing operational failures in Remote Desktop Services, Hyper-V shared folders, and USB audio devices. No CVE assigned.
Business Impact
Organizations relying on Remote Desktop Services experienced RDP connection failures, sign-in issues, and unresponsive servers after September updates. Critical management tools (MMC, RDS Licensing Diagnoser, File Explorer, Windows Update UI) also became unresponsive. Administrators faced a choice between security (keeping flawed updates) and availability (uninstalling updates). Hyper-V users running Linux VMs with shared folders via Plan9 lost access to host directories. USB audio devices in multichannel mode failed, though stereo mode continued working. Out-of-band patches now available via Microsoft Update Catalog and WSUS.
Urgency
đŸ”´ Immediate
Recommended Actions
- Deploy out-of-band updates immediately: KB5129236 (Win10 21H2/22H2), KB5129195 (Win11 24H2/25H2), KB5129194 (Win11 26H1), KB5129238 (Server 2019), KB5129237 (Server 2022), KB5129235 (Server 2025)
- Prioritize Windows Server systems running Remote Desktop Services roles where RDP failures impact business operations or remote workforce access
- Test Hyper-V environments using HCS-managed Linux VMs with Plan9 shared folders to confirm folder accessibility post-patch
- Inventory USB Audio Class 1.0 devices; note that multichannel audio issues are partially resolved but Code 10 errors and no-audio failures persist—monitor Microsoft for additional fixes
- If September updates were uninstalled as a workaround, reinstall them after applying out-of-band patches to restore security protections