An updated version of the October 2025 Scan Cab is available

IMPORTANT: This notice is only relevant for environments where: Scan Cab is used to check for update compliance. The October 2025 Scan Cab was deployed before 8:54 pm PT on October 24, 2025.   An updated version of the October 2025 Scan Cab was made available at 8:54 pm PT on October 24, 2025. This Scan Cab includes new metadata corresponding to new updates for the following versions of Windows Server: Windows Server 2025 (KB5070762; KB5070881)  Windows Server, version 23H2 (KB5070879)  Windows Server 2022 (KB5070884)  Azure Automanage for Windows Server 2022 with Hotpatch (KB5070892)  Windows Server 2019 (KB5070883) Windows Server 2016 (KB5070882) Windows Server 2012 R2 (KB5070886) Windows Server 2012 (KB5070887)   The new Microsoft updates include an out-of-band update, released October 20, 2025, to fix an issue in the Windows Recovery Environment (WinRE), and out-of-band updates, released October 23-24, 2025, that include additional protections to address CVE-2025-59287. Windows servers that do not have the WSUS server role enabled are not affected by this vulnerability. See the additional information section of this message for details. How this affects your organization: IT administrators who downloaded the Scan Cab before 8:54 pm PT on October 24, 2025, should re-acquire and re-deploy their Scan Cab if it is used to assess updates for environments where Windows Server is installed and the WSUS server role is enabled.   No action is required on environments where Scan Cab is not employed. However, please note that there might be non-Microsoft applications which utilize Scan Cab. Review the documentation for any software and update deployment tools which might be in use for your organization to understand if this is applicable in your environment.   What you need to do to prepare: Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.   Additional information: Updated Scan Cab: Download the new Scan Cab here CVE-2025-59287: Windows Server Update Service (WSUS) Remote Code Execution Vulnerability Announcing a smaller WSUS Scan Cab – Microsoft Tech Community: Learn more about WSUS and the Scan Cab process Using WUA to Scan for Updates Offline – Win32 apps | Microsoft Docs: Windows Update Agent (WUA) can be used to scan computers for […]

The post An updated version of the October 2025 Scan Cab is available appeared first on M365 Admin.