KB5123099 Checksum Mismatch Issue – Windows Server 2016 September 2026 Update

KB5123099 Checksum Mismatch Issue – Windows Server 2016 September 2026 Update

Hello everyone !

We have identified an issue affecting the September 2026 Cumulative Update for Windows Server 2016 (KB5123099), where the same Microsoft download URL may intermittently serve different files.

In the affected downloads, one package is valid, while another package has been observed with a mismatched SHA1 hash, no valid Microsoft digital signature, and an inability to extract the MSU package. This behavior can result in checksum mismatch failures while downloading or deploying KB5123099 through ManageEngine Patch Management.

Microsoft Q&A reports also indicate similar symptoms, including extraction failures and installation errors such as 0x8007065E.


Workaround

Customers encountering a checksum mismatch for KB5123099 can use either of the following approaches:

  1. Retry the patch deployment
    • Re-deploy the patch.
    • Since the Microsoft download URL may return different file content across attempts, retrying the deployment may result in the valid package being downloaded and successfully passing checksum validation.
  2. Download and deploy the update manually
    • Download KB5123099 directly from the Microsoft Update Catalog, verify the downloaded package, and deploy it through Software Deployment (SWD).
    • Expected checksum: 90b81aeccbf44e626d57fe86446e68ecb8b1fc44b1bcce365e7b1ed26a050cea

Before deploying the package manually, ensure that the checksum matches the expected value and that the file contains a valid Microsoft digital signature.


Current Status

We have raised this issue with Microsoft through the Microsoft Q&A forum and are awaiting further clarification.


Microsoft’s current KB5123099 documentation does not list this download-integrity issue as a known issue.

For more information, refer to:

Microsoft Q&A – KB5123099: Inconsistent File Served from Single Download URL
https://learn.microsoft.com/en-us/answers/questions/5998838/kb5123099-inconsistent-file-served-from-single-dow

Microsoft Q&A – KB5123099 Server 2016 September 2026 LCU installation issue
https://learn.microsoft.com/en-nz/answers/questions/5998147/kb5123099-server-2016-sept-2026-lcu-fails-with-0x8

Microsoft KB5123099 documentation
https://support.microsoft.com/en-us/servicing/os/windows-10/2026/09/kb5123099-windows-10-1607-security-update


We will update this post once additional information or a resolution is available from Microsoft.


Regards,
The ManageEngine Team

      • Sticky Posts

      • Windows all set to initiate automatic upgrade to the latest 1909 feature pack

        Hi everyone, The support for Windows 10 Home, Pro, Pro Education, and Pro for Workstations editions on 1809 ends May 12, 2020. Microsoft pushes computers running on the October 2018 update, version 1809, to update to the November 2019 update, version 1909 automatically. The process that will initiate this automatic update will be rolled out real soon, says Microsoft.  In case of such automatic updates in a diverse network environment, there are high chances of incompatibilities. If you are using
      • Planned maintenance of our US Data center on Dec 19th & 21st

        Dear Customers, We have planned a network infrastructure upgrade on our primary Data center in the USA on Dec 19, 2019 from 6:30 PM to 10:00 PM PST and Dec 21st, 2019 from 6:30 PM to 10:00 PM PST. During this upgrade, we will be switching Patch Manager Plus, Mobile Device Manager Plus, and Remote Access Plus from the endpoint management suite to our secondary Data Center to ensure that our services continue functioning. We do not expect any disturbances to the services during this period, but should
      • [Free Seminar] Secure your organization's endpoints against the latest cyberattacks and security vulnerabilities

        Be it WannaCry, Meltdown, Spectre or Petya each year bears witness to new cyberattacks and security vulnerabilities, and the year 2019 is no different. From the BlueKeep vulnerability that affects over a million systems, to the ZombieLoad attack that affects nearly every Intel chip since 2011, IT teams across the globe face an uphill battle this year to secure their organization's desktops and mobile devices.  Organizations irrespective of the industry they cater to, are often caught unawares by
      • Share your thoughts about Patch Manager Plus and earn a gift card!

        Dear folks, Thanks for your continued support of Patch Manager Plus. We would like to hear how we are faring. You can review us on IT Central Station here:  https://www.itcentralstation.com/lp/vendor_invite?product_id=manageengine-patch-manager-plus Also, you can review us on Capterra:  http://ca.gartnerdigitalmarkets.com/Patch-Manager-Plus-179288-SS-01_Write_a_Review.html What more, you will be entitled for a gift coupon worth $10 upon reviewing us on Capterra! ​Keep your reviews coming, your reviews
      • Join us for an Endpoint Security seminar this November!

        2018 is coming to an end but the fight against this year's cyberthreats is far from over. ManageEngine brings you an Endpoint Security and Management seminar where you'll have a chance to work with product experts on formulating a plan to protect your endpoints from different malware, including ransomware. Join us at any of our one-day complimentary seminars in Mumbai and Bangalore and show these threats who's boss!  Register now to save your spot! What's in it for you? Discover the top cybersecurity

                        New to ADSelfService Plus?