security update

Question

Issue Summary

Problem Description: Several devices running Windows 11 25H2 are not detecting or installing the latest monthly cumulative security updates.

Environment

Operating System: Windows 11 25H2

OS Build: 10.0.26200.7899

Affected Devices: Multiple laptops

Issue Details

The affected devices do not detect monthly cumulative updates (CUs) when checking for updates through Windows Update.

For example, the May 2026 Cumulative Update (CU2026-05) is not offered to the devices.

The update is not displayed in the list of available updates during a manual Windows Update scan.

Troubleshooting Performed

The following remediation steps have already been attempted without success:

Ran Restore Health using DISM (DISM /Online /Cleanup-Image /RestoreHealth).

Cleared/reset the Windows Update download cache (SoftwareDistribution folder cleanup).

Performed a new update scan after the cleanup.

Current Impact

Affected devices remain on build 10.0.26200.7899.

Monthly security updates are not being offered or installed, potentially leaving devices out of compliance and missing security fixes.

Assistance Requested

Determine why Windows 11 25H2 devices on build 10.0.26200.7899 are not detecting the latest cumulative updates.

• Confirm whether there are any known issues, update safeguards, deployment holds, or servicing-related conditions affecting update detection for this build.

  Issue Summary

  Problem Description:
  Several devices running Windows 11 25H2 are not detecting or installing the latest monthly cumulative security updates.

  Environment

  • Operating System: Windows 11 25H2
  • OS Build: 10.0.26200.7899
  • Affected Devices: Multiple laptops

  Issue Details

  • The affected devices do not detect monthly cumulative updates (CUs) when checking for updates through Windows Update.
  • For example, the May 2026 Cumulative Update (CU2026-05) is not offered to the devices.
  • The update is not displayed in the list of available updates during a manual Windows Update scan.

  Troubleshooting Performed

  The following remediation steps have already been attempted without success:
  • Ran Restore Health using DISM (DISM /Online /Cleanup-Image /RestoreHealth).
  • Cleared/reset the Windows Update download cache (SoftwareDistribution folder cleanup).
  • Performed a new update scan after the cleanup.

  Current Impact

  • Affected devices remain on build 10.0.26200.7899.
  • Monthly security updates are not being offered or installed, potentially leaving devices out of compliance and missing security fixes.

  Assistance Requested

  • Determine why Windows 11 25H2 devices on build 10.0.26200.7899 are not detecting the latest cumulative updates.
  • Confirm whether there are any known issues, update safeguards, deployment holds, or servicing-related conditions affecting update detection for this build.

Answer 1

Go to Download Windows 11 - Microsoft and use the Windows 11 Installation Assistant. Report back the result.

Answer 2

Windows 11, version 25H2 is in broad availability and there are no open, documented safeguard holds or servicing issues in the provided context that would block general offering of monthly cumulative security updates to devices on this version.

From the available information:

1. Windows 11 25H2 servicing status
   • Windows 11, version 25H2 is available for all eligible devices and is being delivered via the normal intelligent rollout through Windows Update.
   • Devices can also manually check for updates via Settings > Windows Update > Check for updates to receive 25H2 and subsequent monthly security updates.
   • There is no indication in the context of a servicing pause or global block on cumulative updates for build 26200.x.
2. Known/Resolved issues around recent security updates
   • A specific issue is documented for the May 2026 security update (KB5089549, OS Build 26100.8457) where installation can fail with error 0x800f0922 on devices with low free space on the EFI System Partition (ESP). This affects devices that do receive the update but fail during install, not devices that never see the update.
   • That issue has been marked as resolved by a later update (KB5089573) and is not described as preventing the update from being offered; it affects installation success on certain devices.
   • Another documented issue involves updates installed via WUSA from a shared folder and does not affect detection via Windows Update.
   • The Windows Update Troubleshooter described in the context targets devices that repeatedly fail to install quality updates due to servicing stack corruption; it adjusts registry keys to allow an in-place style upgrade path. It is not described as blocking detection of new CUs on otherwise healthy devices.
3. Safeguard holds and deployment controls
   • The 25H2 release-health documentation references safeguard holds in general, but the only specific issue listed in the provided context for the 24H2/25H2 timeframe is the May 2026 0x800f0922 ESP-space problem, which is already resolved.
   • There is no explicit mention in the context of a safeguard hold or deployment block that would prevent Windows 11 25H2 devices on build 26200.7899 from being offered later cumulative updates.
4. Update acquisition options
   • For devices that are not receiving a particular cumulative update via Windows Update, the context shows that administrators can:
     • Manually download and install the relevant cumulative update from the Microsoft Update Catalog (as was done successfully for KB5089549 in the referenced Q&A), or
     • Use an in-place upgrade with a current Windows 11 ISO to move the device to the latest build of 25H2, which can also refresh servicing components and then allow normal monthly updates to resume.

Based on the provided documentation, there is no documented, active known issue, safeguard, or servicing condition specific to Windows 11 25H2 build 10.0.26200.7899 that would universally prevent detection of the latest cumulative security updates. For affected devices, recommended next steps from the context are:

• Manually obtain and install the target cumulative update from the Microsoft Update Catalog, then restart and re-check Windows Update.
• If issues persist across multiple quality updates, consider an in-place upgrade to the latest 25H2 build using current installation media, which preserves apps and data but refreshes the OS and servicing stack.

---

References:

• Windows 11, version 25H2 known issues and notifications
• Resolved issues in Windows 11, version 25H2
• Windows 11, version 24H2 known issues and notifications
• Windows Update Troubleshooter for devices experiencing recurring issues installing monthly security updates
• Checkpoint cumulative updates and Microsoft Update Catalog usage
• Error with recent windows security update: 2026-05 Security Update (KB5089549) (26200.8457) Error Code: (0x80073712) - Microsoft Q&A
• Mijn windows updates gaan mis - Microsoft Q&A
• win end of life update - Microsoft Q&A