patch-regressionwidely-deployed-product-advisory

Microsoft Reopens Windows 11 Always On VPN Bug After Incorrect Fix Claim

Patch & Detection Intelligence · 2 sources · Updated 5d ago · First seen Oct 21, 2026

Microsoft acknowledged that its October 2026 Windows cumulative updates did not fix an Always On VPN connection bug, reversing an earlier claim that the issue was resolved. The bug affects Windows 11 24H2 and later after installation of the September 2026 security updates. When automatic protocol selection or protocol fallback is configured, an initial failed connection attempt can leave subsequent VPN connections stuck or failing, potentially disrupting remote access.

Microsoft changed the issue’s status from Resolved to Mitigated and recommends that administrators configure affected Always On VPN profiles to use SSTP only or IKEv2 only, according to organizational requirements. Organizations should not treat installation of the October updates as remediation for this issue. Microsoft plans to deliver a permanent fix in the coming weeks but has not announced a specific release date.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Sep 2026 – Oct 13, 2026

Reported Oct 21, 20267d ago
Microsoft reopens the VPN issue and confirms a single-protocol workaround
Microsoft confirmed that the October updates had not fixed the bug, restored its status to Mitigated, and apologized for the incorrect resolution notice. It advised administrators to configure affected VPN profiles for SSTP only or IKEv2 only while a permanent fix remained pending.
Microsoft says October updates didn’t actually fix VPN issues
Oct 13, 202615d ago
Microsoft mistakenly marks the VPN issue as resolved
Microsoft changed the Always On VPN issue's status to Resolved on October 13, 2026, following the release of the October Windows 11 cumulative updates. Those updates did not actually resolve the connection failures.
Microsoft says October updates didn’t actually fix VPN issues
Sep 2026
Microsoft acknowledges Always On VPN connection failures
Microsoft first acknowledged the issue in a service alert to IT administrators in late September 2026. Affecting Windows 11 24H2 and later after September security updates, the bug can leave VPN connections stuck or failing after an initial failed attempt when automatic protocol selection or fallback is enabled.
Microsoft says October updates didn’t actually fix VPN issues

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Affected products

1 linked

Windows 11

Organizations

1 linked

Microsoft Corporation

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

GhacksNews · Oct 23, 2026

Microsoft Reopens the Windows 11 Always On VPN Bug It Wrongly Marked as Fixed in October Updates - gHacks Tech NewsOpen source ↗

Bleeping ComputerNews · Oct 21, 2026

Microsoft says October updates didn’t actually fix VPN issuesOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Microsoft Reopens Windows 11 Always On VPN Bug After Incorrect Fix Claim

How this story unfolded

Microsoft reopens the VPN issue and confirms a single-protocol workaround

Microsoft mistakenly marks the VPN issue as resolved

Microsoft acknowledges Always On VPN connection failures

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Windows 11 KB5124008 Breaks Certificate-Based Always On VPN

September Windows Updates Break Always On VPN and Trigger Enterprise Issues

Windows 10 and 11 Updates Disrupt Enterprise Messaging and VPN Access

Microsoft Reopens Windows 11 Always On VPN Bug After Incorrect Fix Claim

How this story unfolded

Microsoft reopens the VPN issue and confirms a single-protocol workaround

Microsoft mistakenly marks the VPN issue as resolved

Microsoft acknowledges Always On VPN connection failures

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Windows 11 KB5124008 Breaks Certificate-Based Always On VPN

September Windows Updates Break Always On VPN and Trigger Enterprise Issues

Windows 10 and 11 Updates Disrupt Enterprise Messaging and VPN Access