Updates for SharePoint Server Subscription Edition (September 2025 CU)

14 September 2025    |    Comments   Comments: 0

A new cumulative update (September 2025 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.19127.20100

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002784 – September 2025 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

If the farm runs 2013-style workflows, install the August 2025 SharePoint Workflow Manager patch before this CU. Farms still using classic Workflow Manager must upgrade to the latest SharePoint Workflow Manager build. SharePoint workflows now require the latest SharePoint Workflow Manager update.

Accounts belonging to WSS_WPG are now blocked from administrative processes, including the SharePoint Products Configuration Wizard. Microsoft documents the restriction and resulting permission-denied error in Account permissions and security settings in SharePoint Servers.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses a remote code execution vulnerability: CVE-2025-54897.

The unified update in KB 5002784 includes these SharePoint Server Subscription Edition changes:

  • Adds the Version 25H2 feature update, which is also included in subsequent SPSE public updates.

  • Adds Test-DefenderAndAmsiWorkProperly in SharePoint Management Shell to check that every Windows Defender component is installed and active and that SharePoint AMSI integration works correctly.

  • Changes Machine Key Rotation Job from a monthly to a weekly schedule and triggers it automatically after each update cycle completes.

  • Enhances the AMSI Filter module and changes its default setting to always on.

  • Fixes an issue where configuring throttling rules immediately blocks every matching request.

  • Updates the NuGet package to Microsoft.Exchange.OfficeGraph.SpoolsScaleOutMapper 5.0.5.

  • Fixes an issue where some characters display incorrectly in outgoing email encoded with GB18030.

Comments are closed.