KB5126655: Overview with user sentiment and feedback
Last Updated October 15, 2026
Probability of successful installation and continued operation of the machine
Overview
KB5126655 is the October 13, 2026 cumulative security update for Windows Server 2022 (OS Build 20348.5761). It bundles security fixes and non-security changes from the September 2026 optional preview and out-of-band update KB5129237, and includes servicing stack update KB5126654 (20348.5739). Windows Server 2022 reaches end of mainstream support with this release, so it is the last mainstream security update for that version.
General Purpose
- Adds enhanced NTLM auditing to help identify legacy NTLM dependencies.
- Enables permanent DST for British Columbia and Alberta from November 2026 and adds the Manitoba Standard Time zone.
- Upgrades the bundled cURL to 8.21.0.
- Adds auditing (on by default) and optional enforcement policies for ReFS on externally attached storage.
- Fixes a Storage Spaces Direct issue where virtual disks could remain offline after an update.
- Automatically remediates overly permissive AD FS DKM container ACLs (CVE-2026-56155); admins can opt out via RemediateDkmAcl=0.
- Fixes a USB Audio Class 1.0 device issue where devices failed to start or produce audio.
General Sentiment
Community discussion for this specific update was not available in the crawled data, so no user reports could be assessed. The changes are mostly targeted fixes and security hardening, and the AD FS DKM change alters default behavior, so administrators should test it before broad rollout.
Known Issues
Disclaimer: We take measures to ensure that AI-generated content is of the highest possible quality, but we cannot guarantee its accuracy and recommend that users do their own independent research. Generated on 2026-10-15 01:35 PM
