Home/Patch Tuesday October 2026
Patch Tuesday October 2026: Known Issues and What Broke
Known issues and what broke on Patch Tuesday October 2026.
01
Open
| Call | Title | Vendor | Products | Date |
|---|
| Patch now |
|---|
| CallCall: Patch now | TitleFortiOS CVE-2025-61624: an April fix, an October KEV entry, and an implant called PEERSTITCHCategory: Enterprise | VendorFortinet | ProductsFortiOS, FortiProxy +2 | Date |
| CallCall: Patch now | TitleNextcloud's built-in Collabora app: exploited for six weeks, CVE'd for ten daysCategory: EnterpriseCategory: Homelab | VendorNextcloud | ProductsCollabora Online - Built-in CODE Server (richdocumentscode) before 26.4.303 | Date |
| CallCall: Patch now | TitleOctober 2026 Patch Tuesday: 1,413 fixes, one exploited zero-day, and an Exchange hangoverCategory: EnterpriseCategory: End-user apps | VendorMicrosoft | ProductsWindows 10, Windows 11 +3 | Date |
| CallCall: Patch now | TitlePAN-OS CVE-2026-0322: root on your firewall, exploited, and php2shell is next in lineCategory: Enterprise | VendorPalo Alto Networks | ProductsPAN-OS 10.2-12.2, Panorama | Date |
| CallCall: Patch now | Titlephp2shell: patch PHP now, and remember how many of your boxes quietly run itCategory: EnterpriseCategory: Homelab | VendorPHP | ProductsPHP 8.2-8.5, PAN-OS +4 | Date |
| CallCall: Patch now | TitlePlex2Shell: your media server is now somebody else's crypto minerCategory: Homelab | VendorPlex | ProductsPlex Media Server before 1.43.3.10861 | Date |
| CallCall: Patch now | TitleTwo more edge boxes under fire: Cisco Secure Email Gateway and Ivanti Connect SecureCategory: Enterprise | VendorCisco | ProductsCisco Secure Email Gateway, Ivanti Connect Secure | Date |
| Hold |
|---|
| CallCall: Hold | TitleDebian 13 kernel 6.12.111 and Broadcom NICs: Proxmox already did this oneCategory: EnterpriseCategory: Homelab | VendorDebian | ProductsDebian 13 trixie kernel 6.12.111+deb13, bnxt_en +1 | Date |
| CallCall: Hold | TitleHP ProBook 4 G1i BIOS 01.05.04: restart is now a two-step processCategory: End-user apps | VendorHP | ProductsHP ProBook 4 G1i 14 and 16 (platform 8DEA), BIOS X72 01.05.04 | Date |
| CallCall: Hold | TitleNVIDIA 621.01: your videos now come with intermissionsCategory: End-user apps | VendorNVIDIA | ProductsGeForce Game Ready Driver 621.01 | Date |
| CallCall: Hold | TitleOld OnGuard vs new Windows: the Login Driver can't find its way homeCategory: Enterprise | VendorLenelS2 | ProductsLenelS2 OnGuard 7.4-8.1, Windows cumulative updates Aug-Oct 2026 | Date |
| CallCall: Hold | TitleWindows 11 26H2 on Falcon fleets: hold the feature update, not the security updateCategory: Enterprise | VendorMicrosoft | ProductsWindows 11 26H2, CrowdStrike Falcon | Date |
| Deploy with care |
|---|
| CallCall: Deploy with care | TitleKB5127648 boot failures: reported, not confirmed, worth a pilot ring per modelCategory: EnterpriseCategory: End-user apps | VendorMicrosoft | ProductsWindows 11 24H2/25H2/26H2, Dell Pro 14 +4 | Date |
| CallCall: Deploy with care | TitleOctober Windows Server updates vs on-prem Exchange: one registry value, set it firstCategory: Enterprise | VendorMicrosoft | ProductsExchange Server 2016, Exchange Server 2019 +2 | Date |
| CallCall: Deploy with care | TitleYour PEAP-MSCHAPv2 Wi-Fi stopped auto-connecting. That's not a bug, that's the roadmap.Category: Enterprise | VendorMicrosoft | ProductsWindows 11 24H2/25H2/26H2, Windows Server 2025 | Date |
02
Resolved
No resolved issues in this cycle.