A new cumulative update (April 2026 CU) has been released for SharePoint Server Subscription Edition.
SP Build:
16.0.19725.20210
Important before installation:
If you are upgrading from the September 2025 CU to a newer update, remove the NT AUTHORITY\SYSTEM account from the local WSS_WPG and IIS_IUSRS groups on every SharePoint server in the farm before installation, if it is a member. Otherwise, installation of the update may fail.
Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.
SharePoint Subscription Edition CU – KB articles describing the CU:
- KB 5002853 – April 2026 Update for SharePoint Server Subscription Edition
SharePoint Server Subscription Edition CU – CU download links:
After installation, remember to run the SharePoint Products Configuration Wizard or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Important notes
To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.
The language you select when downloading the update does not matter because the same package is downloaded for every language.
Note for this CU:
KB 5002853: Install this CU on the release version of SharePoint Server Subscription Edition. If the farm uses SharePoint Workflow Manager, first install KB5002799.
Classic Workflow Manager requires enabling the following debug flag to remain usable:
$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset
Included fixes and improvements
The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.
SharePoint Server Subscription Edition
KB 5002853 addresses SharePoint Server spoofing vulnerabilities. The KB lists these advisories: CVE-2026-32201, CVE-2026-20945.
The unified package KB 5002853 brings these SharePoint Server Subscription Edition changes:
-
Fixes an issue affecting GB18030-2022 certification.
-
Improves data ingestion throughput by raising the hit rate of the ingestion cache.
-
Fixes an issue where adding the query parameter
pto an on-premises publishing page URL changes the interface unexpectedly. Withp=2, client-side routing treats the page as a File Picker and displays that interface instead of the publishing page. -
Fixes an issue where
SPOONSOnboard-CloudHybridSearch-SPOONS.ps1fails for new tenants. Validation now checks the Azure Active Directory (Azure AD) App ID rather than the app name. -
Fixes an issue where inserting hyperlinks in the rich text editor prevents the Enter key from creating a new line.
-
Fixes an issue where enabling custom document content types in a document library hides the default Office options.