60
47
35
35
30
30
35
60
30
35
60
35
30
30
47
60
Windows 11 Security Update KB5124008 Breaks Always-On VPN Connections
Microsoft's September 2026 Windows 11 update KB5124008 breaks certificate-based Always On VPN on some enterprise clients, forcing admins to pause rollout.
Microsoft's September 8, 2026 cumulative update KB5124008 for Windows 11 24H2 (build 26100.9445) and 25H2 (build 26200.9445) breaks certificate-based Always On VPN tunnels on some enterprise clients, with connectivity restored after uninstalling the update and rebooting. The issue was first detailed on Microsoft Q&A on September 9 by an administrator using Intune-deployed VPN profiles with RRAS and NPS on Windows Server 2019. The same mandatory Patch Tuesday package fixes two actively exploited zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows Advanced Local Procedure Call, so many teams are pausing only VPN cohorts rather than blocking the full rollout.
48
60
42
47
47
35
55
60
60
35
60
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
60
30
60
35
35
60
60
35
60
60
30
60
35