Our takeMicrosoft's September 2026 Patch Tuesday fixes 972 CVEs, including two exploited zero-days. Patch today.Cyber Resilience desk
Sources (3)
- crowdstrike · crowdstrike
- csa_sg · csa_sg
- csa_sg · csa_sg
What this means for you — Security leader:Apply Microsoft's September 2026 patches immediately; they fix two exploited zero-days plus 113 critical flaws among 972 total CVEs. Also patch the Check Point Quantum RCE and MongoDB unauthenticated admin issues flagged by Singapore CSA.
What this means for you — Lean IT orgs:Run Windows Update today to get Microsoft's fixes for two exploited zero-days and many critical bugs. If you run Check Point Quantum gateways or self-managed MongoDB, apply those security updates right away.
What this means for you — MSP:Prioritize Microsoft's September 2026 patches across client estates: two exploited zero-days and 113 criticals in a 972-CVE release. Separately ensure Check Point Quantum Security Gateway/Management and MongoDB Server instances receive the CSA-advised fixes promptly.
What this means for you — Researcher:CrowdStrike's September 2026 Patch Tuesday analysis covers two exploited zero-days, 113 criticals, and 972 total CVEs. Singapore CSA also published urgent alerts on unauthenticated RCE in Check Point Quantum and full admin access in MongoDB.