74 openlast updated

HomePatch Tuesday November 2026

Patch Tuesday November 2026: Known Issues and What Broke

Known issues and what broke on Patch Tuesday November 2026.

01

Open

CallTitleVendorProductsDate
Patch now
CallPatch nowTitleNetScaler ADC and Gateway CTX697305: 9 critical bugsEnterpriseVendorCitrixProductsNetScaler ADC and Gateway 14.1 before 14.1-73.57, NetScaler ADC and Gateway 13.1 before 13.1-64.39 +3Date
CallPatch nowTitleCVE-2026-105133/105134: AhsayCBS chain exploitedEnterpriseVendorAhsayProductsAhsayCBS v10 (through 10.3.4.0), AhsayCBS v9 +2Date
CallPatch nowTitleScreenConnect RMM+ extension: blank access key exploitedEnterpriseVendorConnectWiseProductsScreenConnect (cloud and on-premises) with RMM+ family extensions, RMM+ extension 1.0.31 and 1.0.32Date
CallPatch nowTitleVSA-2026-063: Xen Orchestra VM import flaw exploited, no fixEnterpriseHomelabVendorVatesProductsXen Orchestra 6.10.1 and earlier, Xen Orchestra Appliance +1Date
CallPatch nowTitleCVE-2026-102895: GPUStack hands out admin to proxiesEnterpriseHomelabVendorGPUStackProductsGPUStackDate
CallPatch nowTitleCVE-2026-111793: Openwave Webtop Transcoder exploitedEnterpriseVendorOpenwave MessagingProductsWebtop Media TranscoderDate
CallPatch nowTitleCVE-2026-116606: Barracuda ESG root chain exploitedEnterpriseVendorBarracudaProductsBarracuda Email Security Gateway, Barracuda Load Balancer ADC +4Date
CallPatch nowTitleCVE-2026-116779: FreeSWITCH SIP MESSAGE runs commandsEnterpriseHomelabVendorSignalWireProductsFreeSWITCHDate
CallPatch nowTitleCVE-2026-123218: IBM Aspera Faspex auth bypass exploitedEnterpriseVendorIBMProductsIBM Aspera Faspex 5Date
CallPatch nowTitleCVE-2026-124194, KB5132061: Patch Tuesday roundupEnterpriseEnd-user appsVendorMicrosoftProductsWindows 10, Windows 11 +5Date
CallPatch nowTitleCVE-2026-124194: Outlook zero-day leaks NTLM hashesEnterpriseEnd-user appsVendorMicrosoftProductsMicrosoft 365 Apps for Enterprise, Office LTSC 2024 +2Date
CallPatch nowTitleCVE-2026-125350: Chrome XML zero-day, Edge fix pendingEnterpriseEnd-user appsVendorGoogle, MicrosoftProductsGoogle Chrome, Microsoft Edge +1Date
CallPatch nowTitleCVE-2026-20320: Cisco BroadWorks XXE now exploitedEnterpriseVendorCiscoProductsCisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server +2Date
CallPatch nowTitleN-central 2026.4 HF2: critical fix after public exploitsEnterpriseVendorN-ableProductsN-centralDate
CallPatch nowTitleVSA-2026-062: Xen Orchestra auth bypass is being exploitedEnterpriseHomelabVendorVatesProductsXen Orchestra, Xen Orchestra Appliance +1Date
Hold
CallHoldTitleDell Pro 16 Plus BIOS 2.19.0 plus Intel drivers: no bootEnterpriseEnd-user appsVendorDell, IntelProductsDell Pro 16 Plus (PB16250) BIOS 2.19.0, Intel Ethernet driver 20.0.3.35 +2Date
Known issues
CallKnown issueTitleKB5131090: slmgr /rearm breaks Citrix MCS image prepEnterpriseVendorMicrosoft, CitrixProductsWindows Server 2022 (KB5131090), Windows Server 2019 (November CU +5Date
CallKnown issueTitleKB5132061: Sage 50 crashes after November Windows updatesEnterpriseEnd-user appsVendorMicrosoft, SageProductsSage 50 Accounting (US) 2026, Windows 11 24H2/25H2/26H2 (KB5132061) +4Date
CallKnown issueTitleKB5135557: NTLM signing change breaks App Volumes agentEnterpriseVendorMicrosoft, OmnissaProductsWindows 11 24H2 and 25H2 (KB5132061), Other Windows versions with November updates +1Date
CallKnown issueTitleWindows CUs leave SQL Server linked server connections openEnterpriseVendorMicrosoftProductsWindows Server 2025, Windows Server 2022 +7Date
CallKnown issueTitleKB5132061: install fails with 0x800f0993 or 0x800f0989EnterpriseEnd-user appsVendorMicrosoftProductsWindows 11 26H2, Windows 11 25H2 +1Date
02

Resolved

No resolved issues in this cycle.