The September 2026 Scan Cab is available

🚨 The Signal: Microsoft released the September 2026 Scan Cab, enabling offline Windows update compliance checks. This is crucial for air-gapped or disconnected environments to maintain security patching posture without direct internet access.

The Impact

Organizations with offline Windows devices are affected, risking non-compliance and unpatched vulnerabilities if the new Scan Cab is not deployed.

• Security Teams: Risk of unpatched vulnerabilities in offline systems if Scan Cab is not updated.
• Admins: Required to manually download and deploy the new Scan Cab for compliance scanning.
• Compliance Officers: Potential for non-compliance with patching policies for disconnected devices.

The Action

1. Identify all Windows environments utilizing the Scan Cab for offline update compliance.
2. Download the September 2026 Scan Cab (Wsusscn2.cab) from the Microsoft Update Catalog.
3. Deploy the downloaded Scan Cab to all relevant offline systems or WSUS servers.
4. Monitor for the subsequent Scan Cab release containing Microsoft Office update metadata (KB5002923) and deploy it when available.

Domain: Other · Impact: high · Workload: Other · Essential Eight: Patch Operating Systems · ISM: ISM-1407, ISM-1501, ISM-1621, ISM-1622, ISM-1623, ISM-1654, ISM-1655, ISM-1694, ISM-1695, ISM-1696, ISM-1701, ISM-1702, ISM-1877, ISM-1889, ISM-1902