Microsoft WSUS Sync Bug Leaves Critical Patches Undeployed
ID: f6150d11-8725-546e-bbb0-9372d471dbb7
STIX ID: report--f6150d11-8725-546e-bbb0-9372d471dbb7
Feed Name: ThreatCluster
Threat Score
On July 21, 2026 Microsoft released manual remediation guidance after a WSUS synchronization outage (starting July 13) blocked deployment of critical patches for two actively exploited zero-day vulnerabilities—CVE-2026-56164 (on-premises SharePoint Server) and CVE-2026-56155 (Active Directory Federation Services); one is scored 9.8 CVSS and a missed federal remediation deadline has left many organizations urgently exposed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.