Patch Tuesday Updates: October 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45676 - 2026-10 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5126649) 45677 - 2026-10 Servicing Stack Update
UEMS Agent Health Checker launches a console host in the interactive user session every 20 minutes (Windows 11 25H2)
Hello, We use **ManageEngine Endpoint Central Cloud**. On Windows 11 25H2 clients, users see a console window flash briefly about every 20 minutes. Process monitoring captured this chain: `UEMSAgentHealthChecker.exe` → `UEMSAgentHcHelper.exe` → `UEMSAgentHcComHelper.exe`
EndpointCentral Cloud - ManageEngine Agent Not Digitally Signed
When I recently downloaded the Manage Engine agent and tried installing it, I'm getting a Microsoft Defender SmartScreen error. I noticed the installation executable is not digitally signed.
Windows 11 26H2 Feature - Release Information
Good day, everyone! As an initiative we have supported the Enablement Package for Upgrading the systems from Windows 11 Version 24H2/25H2 to Windows 11 Version 26H2. The corresponding Windows 11 26H2 operating system (OS) patches will be released separately
UEMS Agent Health Checker – console window flashing in user session every 20 minutes (Windows 11)
Hi all, For a few days now, users on our Windows 11 clients have been seeing a console window that pops up and closes immediately, several times a day. Only workstations are affected; we have not seen it on servers. Environment Product: ManageEngine Endpoint
Will DesktopCentral supports ACME/Let's Encrypt?
Hi there! Do you have a plan to support Let's Encrypt certificate (through automatic renew) for DesktopCentral? Thanks Sylvain
Deploy and enforce macOS updates via DDM with Endpoint Central
Endpoint Central now supports Apple's Declarative Device Management (DDM) for macOS OS updates, on MDM-enrolled devices running macOS 14 (Sonoma) and later, from build 11.5.2632.03. About DDM DDM is Apple’s newer way of managing Macs. Instead of the server
Feature Pack Management Enhancements Starting with Build 11.5.2627.01
Hello everyone! We’re making Feature Pack upgrades easier to manage. Starting with build 11.5.2627.01, Feature Packs will have their own dedicated Feature Pack view, along with separate Test & Approval and Automated Patch Deployment (APD) options. What’s
Option to auto-close apps that require update AND/OR notify users to save work then quit apps that require updates
I think this shouldn't be too hard to do. Better than seeing "Patch update delayed since application is used by another process" errors https://www.manageengine.com/products/desktop-central/patch-update-delayed-since-application-is-used-by-another-process.html?dci&did=45-1224-2016-05-11-20-21-27-2695 it should be alot like the "Notification Message before Reboot*" but instead "Notification Message before closing vulnerable applications* This would apply for apps such as office 365. which require
Upgrade Problem from build number 10.0.283 to 10.1.2119.10
Just started at a new company managing around 50 endpoints, and I've inherited some pretty outdated software. One of them is ManageEngine Desktop Central, currently sitting on build 10.0.283. I’m trying to bring it up to the latest version, and according
User Interaction for “Manage On-Going Process” Pre-Deployment Activity
Hello everyone, Endpoint Central already provides the “Manage On-Going Process” option as a Pre-Deployment Activity for Software Deployment packages. This is useful for checking whether a specific application/process is currently running before starting
Software Packages can now be integrated with OS Deployment - SWEET!
A big shout out to the Manage Engine development team for integrating Software Deployment packages with OS deployment! No longer will we need separate application deployments, and the updates can be managed through patching! Cool feature, thanks for adding
OSD – Trigger/force patching as final post-deployment step
Hi everyone, We are currently implementing the Endpoint Central OSD module for our Windows staging process. As part of our post-deployment phase, we install the Endpoint Central UEMS Agent as one of the final steps using the new Software Package integration
WMIC utility got deprecated from August Patch, 2026.
Hi Team, As per the Microsoft, the WMIC utility has been removed and it no longer available as FoD. Please let us know if there is any impact on any modules in endpoint central? Windows Management Instrumentation Command-line (WMIC) removal from Windows
Endpoint Central server information update following patching
The situation is we have a set of devices that we patch every other month, the devices are used for a specific purpose so not on or even in our hands than often. We like to turn these around quickly, so patch and power off. We keep seeing it whereby the
Repository file from local computer Software Deploymento
Good morning, I would appreciate some assistance in locating a file contained within a software deployment package. I created a software deployment package and uploaded an installation file by selecting "From Local Computer." I need to access the file,
Patch Release: Google Chrome 154.0.8037.57/58 for Windows and macOS
Hello everyone! Google has released Chrome version 154.0.8037.57/58 for Windows and macOS. This release includes 108 security fixes, including multiple critical vulnerabilities affecting ANGLE, GPU, ServiceWorker, Fullscreen, WebGL, WindowDialog, and
Microsoft Office Click-To-Run Install Options
We're looking to see if there are additional options or workarounds to Office Click-To-Run Install Options. Between the three current options of Closing Forcefully, Do not install while in Use, or Prompting the user to skip we're running into situations
Update for Microsoft Excel 2016 (KB5002665) 64-Bit Edition ID Patch
Good morning. Today I tried to download the "Update for Microsoft Excel 2016 (KB5002665) 64-Bit Edition" patch (patch ID 113957). I am encountering a firewall error; an error occurs when I try to load the .exe file. I should note that the firewall is
Excel Copy/Paste Issues Reported After September 2026 Microsoft Office Updates
Hello everyone ! We are currently observing reports of issues affecting Microsoft Excel 2016, 2019, 2021, and other Office releases following the September 2026 Microsoft Office updates. Users have reported that common Excel functions such as copy and
Enhanced Linux CVE Detection
We are enhancing vulnerability detection for Linux endpoints to provide visibility into CVEs even when a corresponding security patch is not yet available. What’s changing? With this enhancement, Endpoint Central will detect unpatched Linux CVEs based
Can I deploy an application to a group of computers based on version of a software package?
Hello, I see that EC can inventory software and it has Global Protect in its catalog (cool!). We have several users with older versions of Global Protect, and I can find which ones by using the Inventory function. However, I can't seem to group the ones
Patch Release: Google Chrome 153.0.8010.47/48 for Windows and macOS
Google has released Chrome version 153.0.8010.47/48 for Windows and macOS. This release includes 42 security fixes, including multiple critical vulnerabilities affecting WebGL, Internals, and Workers. Applying this update is strongly recommended to protect
Microsoft Office 2021 - End of Support
Microsoft Office 2021 will reach end of support on October 13, 2026. Microsoft has confirmed that there will be no extension and no Extended Security Updates (ESU) for Office 2021. Office 2021 applications may continue to function after the end-of-support
Google Chrome Enterprise Installer - MSI installer used to work in OS Deployment but now requires a full path
Ah, the fun never stops. OS Deployment allows you to create application deployments as part of a template, and I had the Google Chrome Enterprise installer working until about 1-2 weeks ago. Now the installer fails with a 1619 code because it can't run
Endpoint Central now supports macOS 27 Golden Gate!
macOS 27 Golden Gate is now available, and Endpoint Central supports managing and patching devices running macOS 27 Golden Gate. IT administrators can use Endpoint Central to keep their Mac devices up to date by deploying the latest applicable patches
Patch Release: Google Chrome 153.0.8010.36/37 for Windows
Google has released Chrome version 153.0.8010.36/37 for Windows. This release includes 230 security fixes, including an actively exploited zero-day vulnerability in the V8 JavaScript and WebAssembly engine. Google has confirmed that an exploit for CVE-2026-87491
KB5123099 Checksum Mismatch Issue – Windows Server 2016 September 2026 Update
Hello everyone ! We have identified an issue affecting the September 2026 Cumulative Update for Windows Server 2016 (KB5123099), where the same Microsoft download URL may intermittently serve different files. In the affected downloads, one package is
Using Custom Groups defined by OU to deploy patches
It seems as though if I use a static Custom Group made of of OUs, when any member of an OU changes the changes are not reflected in the static group. That's why they are called "static." But when I try and use a Dynamic Group I cannot select its members based upon OU. does it not make sens that I would want to do this? i can see why some would want to deploy based on OS, Service Pack, etc. but I can make a good case for deploying patches based on a Business unit (OU in active directory-speak)
Device alerts and timeline just got smarter: Meet Alert Correlation and Zia-powered timeline insights
Hello everyone, Two important updates just landed in Endpoint Central's DEX module and both help IT teams get to root causes faster. Now, IT teams will have fewer alerts to sift through, and less time spent piecing together what actually happened on a
Patch Tuesday Updates: September 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45338 - 2026-09 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5122874) 45339 - 2026-09 Servicing Stack Update
OS Deployment - how to install an app that failed during deployment?
During OS deployment we occasionally have apps that fail. These are apps that normally install just fine but for whatever reason we'll see an occasional failure. Naturally Manage Engine simply aborts and doesn't retry these failed applications. Is there
CVSS Score Now Directly Reflects the Vendor-Assigned Base Score
Previously, the CVSS score was displayed as an Overall Score, which could include Base, Temporal, and Environmental metrics. Going forward, the CVSS score will reflect the Base Score published by the vendor. Since Temporal and Environmental metrics vary
Curl for Windows: Vulnerability Detection and Patching
Curl is a command-line tool used to transfer data between systems using protocols such as HTTP and HTTPS. It is commonly used by applications and scripts to communicate with web servers and APIs. Curl is included with Windows and is maintained by Microsoft
Confirming successful install of Dell Powershell Module/Dell BIOS Provider for updating Dell BIOS
I'm following this article to run BIOS updates on Dell desktops. It works as described. A prerequisite of the BIOS update process is that the Dell Powershell Module/Dell BIOS Provider be installed on the endpoint. An optional "patch" (shown below) is
Is there a way to export/import years of configs and scripts to another UEMS instance?
Hello Support, I'm curious to know if there is a procedure to export many years of configs and scripts, etc. from one EC UEMS server to another. I ask because I have some fairly sophisticated configs I've built in one instance, and I have another business
Patch Release: Google Chrome 152.0.7977.75/76 for Windows and macOS
Google has released Chrome version 152.0.7977.75/76 for Windows and macOS. This release includes 26 security fixes, including critical vulnerabilities in Shared Tab Groups and WebGL, along with multiple high- and medium-severity fixes across Chrome and
Mac Patch Deployment - User Notification & Postpone Schedule Configuration
Hi Team, We are currently evaluating Endpoint Central on a trial basis for 13 macOS systems in our environment. We have two requirements we'd like clarity on before proceeding further. Requirement 1 - Patch visibility to end users: Our Mac users are notified
Patch Release: Google Chrome 152.0.7977.64/65 for Windows and macOS
Google has released Chrome version 152.0.7977.64/65 for Windows and macOS. This release includes 327 security fixes, including multiple critical vulnerabilities across Chrome and Chromium components such as ANGLE, Aura, Chromecast, Views, Mobile, and
Enhanced JAR Detection in Drive Scan
We have improved JAR detection through Drive Scan starting from build 11.5.2606.x. The enhancement uses the CoverageX component for better JAR component discovery. If you are using a build between 11.5.2540.x and 11.5.2605.x with Drive Scan enabled, we
Next Page
