Skip to content
  • Home
  • Cyber Map
  • About Us – Contact
  • Disclaimer
  • Terms and Rules
  • Privacy Policy
Cyber Web Spider Blog – News

Cyber Web Spider Blog – News

Globe Threat Map provides a real-time, interactive 3D visualization of global cyber threats. Monitor DDoS attacks, malware, and hacking attempts with geo-located arcs on a rotating globe. Stay informed with live logs and archive stats.

  • Home
  • Cyber Map
  • Cyber Security News
  • Security Week News
  • The Hacker News
  • How To?
  • Toggle search form
Windows Servers Face RDS Issues After September Updates

Windows Servers Face RDS Issues After September Updates

Posted on September 11, 2026 By CWS

Administrators worldwide are facing significant challenges with Remote Desktop Services (RDS) on Windows Servers following the distribution of Microsoft’s September 2026 Patch Tuesday updates. This issue affects Windows Server versions 2019, 2022, and 2025, resulting in system freezes and connectivity problems.

Identifying the Source of the RDS Failures

The complications have been traced to cumulative updates KB5122876, KB5122882, and KB5122871, which were released as part of the latest security updates. These updates have caused session hosts to freeze, leaving Remote Desktop Protocol (RDP) connections in a perpetual ‘Connecting…’ state and preventing users from logging off smoothly.

Initial reports emerged from the r/sysadmin community on Reddit, where numerous administrators detailed identical issues across different environments, indicating a widespread problem rather than isolated incidents.

Technical Insights into the RDS Deadlock

After rebooting, affected systems typically operate normally for a few hours before issues arise, generally triggered by user session activities. New RDP attempts hang at the login phase, causing Event ID 20498 to appear in the TerminalServices-RemoteConnectionManager log, indicating prolonged connection times.

Administrators have discovered that the problem may stem from a deadlock in the RDP server base library, specifically in the RDPSERVERBASE!WDLIB_Close routine, which is executed during session termination. This deadlock results in system paralysis, requiring a hard reset to restore functionality.

Mitigation and Future Outlook

Microsoft has yet to confirm the root cause of the issue or provide an official response. Meanwhile, administrators face a dilemma as rolling back the updates can stabilize systems but also removes crucial security patches. September’s updates addressed nearly 973 vulnerabilities, including critical ones like CVE-2026-81963 and CVE-2026-69525.

As a temporary measure, some administrators have found success by disabling specific features through registry modifications, though these solutions remain unofficial. Security teams managing RDS environments should consider testing updates on non-essential systems and prepare rollback strategies while awaiting further guidance from Microsoft.

In light of the ongoing issues, system administrators are encouraged to remain vigilant and monitor for specific events indicating RDS failures, ensuring they are prepared to act swiftly should problems persist. The community continues to await Microsoft’s formal acknowledgment and a potential out-of-band fix.

Cyber Security News Tags:CVE-2026-69525, CVE-2026-81963, CVE-2026-85880, KB5122871, KB5122876, KB5122882, kernel deadlock, Microsoft updates, Patch Tuesday, RDP connections, RDS bug, RDS security, Remote Desktop Services, system administration, Windows Server

Post navigation

Previous Post: AI-Powered Cyberattacks: Claude Agents Revolutionize Hacking
Next Post: Exploits Target JFrog Artifactory Vulnerabilities

Related Posts

Palo Alto Networks Firewall Vulnerability Allows Unauthenticated Attackers to Trigger Denial of Service Palo Alto Networks Firewall Vulnerability Allows Unauthenticated Attackers to Trigger Denial of Service Cyber Security News
Konni Malware Campaign Targets Ukrainian Entities with Fake PDFs Konni Malware Campaign Targets Ukrainian Entities with Fake PDFs Cyber Security News
New Phishing Attack Targeting Meta Business Suite Users to Steal Login Credentials New Phishing Attack Targeting Meta Business Suite Users to Steal Login Credentials Cyber Security News
Microsoft, SentinelOne, and Palo Alto Networks Withdraw from 2026 MITRE ATT&CK Evaluations Microsoft, SentinelOne, and Palo Alto Networks Withdraw from 2026 MITRE ATT&CK Evaluations Cyber Security News
Hackers Can Weaponize Claude Skills to Execute MedusaLocker Ransomware Attack Hackers Can Weaponize Claude Skills to Execute MedusaLocker Ransomware Attack Cyber Security News
Warlock Ransomware Exploiting SharePoint Vulnerabilities to Gain Access and Steal Credentials Warlock Ransomware Exploiting SharePoint Vulnerabilities to Gain Access and Steal Credentials Cyber Security News

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News

Recent Posts

  • Hackers Exploit Claude’s Site and Ads for Malware Spread
  • Apache Camel Resolves Critical Vulnerabilities
  • Exploit Targets WordPress Admin Sessions with PHP Backdoor
  • Cybersecurity Breach Disrupts New Mexico Hospital Operations
  • Cloudflare Updates WAF Rules Amid Brotli Vulnerability

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Archives

  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025

Recent Posts

  • Hackers Exploit Claude’s Site and Ads for Malware Spread
  • Apache Camel Resolves Critical Vulnerabilities
  • Exploit Targets WordPress Admin Sessions with PHP Backdoor
  • Cybersecurity Breach Disrupts New Mexico Hospital Operations
  • Cloudflare Updates WAF Rules Amid Brotli Vulnerability

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News

Copyright © 2026 Cyber Web Spider Blog – News.

Powered by PressBook Masonry Dark