TLDR InfoSec · QUICK LINKS

MICROSOFT: PATCH FOR WSUS FLAW DISABLED WINDOWS SERVER HOTPATCHING

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Microsoft's emergency patch, KB5070881, for the actively exploited CVE-2025-59287 WSUS remote code execution vulnerability inadvertently disabled hotpatching on Windows Server 2025 systems, forcing affected organizations to choose between vulnerability remediation and zero-downtime patching capabilities until the corrected KB5070893 update or the January 2026 baseline becomes available.