thankyouforpatching.com11 openbuilt 2026-10-25 00:05 UTC

Patch desk

what breaks, and should you hold?

01

Open

CallTitleVendorProductsDate
Patch now
CallPatch nowTitleFortiOS CVE-2025-61624: an April fix, an October KEV entry, and an implant called PEERSTITCHVendorFortinetProductsFortiOS, FortiProxy +2Date
CallPatch nowTitleOctober 2026 Patch Tuesday: 1,413 fixes, one exploited zero-day, and an Exchange hangoverVendorMicrosoftProductsWindows 10, Windows 11 +3Date
CallPatch nowTitlePAN-OS CVE-2026-0322: root on your firewall, exploited, and php2shell is next in lineVendorPalo Alto NetworksProductsPAN-OS 10.2-12.2, PanoramaDate
CallPatch nowTitlephp2shell: patch PHP now, and remember how many of your boxes quietly run itVendorPHPProductsPHP 8.2-8.5, PAN-OS +4Date
CallPatch nowTitleTwo more edge boxes under fire: Cisco Secure Email Gateway and Ivanti Connect SecureVendorCiscoProductsCisco Secure Email Gateway, Ivanti Connect SecureDate
Hold
CallHoldTitleDebian 13 kernel 6.12.111 and Broadcom NICs: Proxmox already did this oneVendorDebianProductsDebian 13 trixie kernel 6.12.111+deb13, bnxt_en +1Date
CallHoldTitleOld OnGuard vs new Windows: the Login Driver can't find its way homeVendorLenelS2ProductsLenelS2 OnGuard 7.4-8.1, Windows cumulative updates Aug-Oct 2026Date
CallHoldTitleWindows 11 26H2 on Falcon fleets: hold the feature update, not the security updateVendorMicrosoftProductsWindows 11 26H2, CrowdStrike FalconDate
Deploy with care
CallDeploy with careTitleKB5127648 boot failures: reported, not confirmed, worth a pilot ring per modelVendorMicrosoftProductsWindows 11 24H2/25H2/26H2, Dell Pro 14 +4Date
CallDeploy with careTitleOctober Windows Server updates vs on-prem Exchange: one registry value, set it firstVendorMicrosoftProductsExchange Server 2016, Exchange Server 2019 +2Date
CallDeploy with careTitleYour PEAP-MSCHAPv2 Wi-Fi stopped auto-connecting. That's not a bug, that's the roadmap.VendorMicrosoftProductsWindows 11 24H2/25H2/26H2, Windows Server 2025Date
02

Resolved

No resolved issues.