Updates for SharePoint Server Subscription Edition (October 2025 CU)

19 October 2025    |    Comments   Comments: 0

A new cumulative update (October 2025 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.19127.20262

Important before installation:

If you are upgrading from the September 2025 CU to a newer update, remove the NT AUTHORITY\SYSTEM account from the local WSS_WPG and IIS_IUSRS groups on every SharePoint server in the farm before installation, if it is a member. Otherwise, installation of the update may fail.

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002786 – October 2025 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

KB 5002786: The release version of SharePoint Server Subscription Edition must already be installed. Farms using 2013-type workflows must receive the August 2025 SharePoint Workflow Manager update before this CU.

For continued use of Classic Workflow Manager, enable the debug flag below in the SharePoint Management Shell. These commands also restore workflow operation if it breaks:

$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002786 addresses remote code execution vulnerabilities: CVE-2025-59237 and CVE-2025-59228.

The unified package KB 5002786 includes these changes for SharePoint Server Subscription Edition:

  • Adds the Version 25H2 feature update, which is also included in subsequent public updates.

  • Fixes an issue where a Business Data Connectivity (BDC) external list has compatibility problems when hosted in an Oracle database.

  • Changes the default permissions on the LAYOUTS folder to deny Write access to WSS_WPG and IIS_IUSRS, addressing update installation problems.

  • Fixes an issue where hybrid search required Local Administrator privileges when configuring the search service account; configuration now works without those privileges.

  • Adds assemblies required by Microsoft.Data.SqlClient that were missing from SharePoint Workflow Manager.

  • Fixes an issue where pressing TAB does not move focus between web part sections.

  • Adds encryption settings for handling an unattached content database.

  • Fixes an issue where the Search Query Logging timer job leaves SQL connections to the Search LinksStore database unreleased.

Comments are closed.