{"id":7050,"date":"2026-11-12T05:59:50","date_gmt":"2026-11-12T10:59:50","guid":{"rendered":"https:\/\/underhost.com\/blog\/?p=7050"},"modified":"2026-11-12T05:59:50","modified_gmt":"2026-11-12T10:59:50","slug":"windows-security-update-november-2026-hyper-v","status":"publish","type":"post","link":"https:\/\/underhost.com\/blog\/windows-security-update-november-2026-hyper-v\/","title":{"rendered":"Windows Server Security Update (November 2026)"},"content":{"rendered":"<div class=\"uh-blog-hero\" style=\"margin: 0 0 40px; text-align: center; padding: 48px 24px; border-radius: 20px; background: linear-gradient(135deg,#0D1F3C 0%,#125A8A 58%,#176EA5 100%); color: #ffffff; box-shadow: 0 20px 40px -15px rgba(13,31,60,0.28); position: relative; overflow: hidden;\">\n<p><img loading=\"lazy\" decoding=\"async\" style=\"width: 72px; height: 72px; display: block; margin: 0 auto 18px; filter: drop-shadow(0 0 18px rgba(0,212,255,0.35));\" src=\"https:\/\/underhost.com\/blog\/wp-content\/uploads\/2026\/11\/windows-logo-white.png\" alt=\"Windows logo\" width=\"72\" height=\"72\" \/><\/p>\n<div style=\"display: inline-flex; align-items: center; gap: 8px; padding: 7px 14px; margin-bottom: 16px; border: 1px solid rgba(0,212,255,0.32); border-radius: 999px; color: #dff8ff; font-size: 12px; font-weight: 800; letter-spacing: .06em; text-transform: uppercase; background: rgba(0,212,255,0.10);\"><i class=\"fas fa-shield-alt\" style=\"color: #00d4ff;\"><\/i> Security Update<\/div>\n<h1 style=\"color: #ffffff; font-size: clamp(32px,5vw,46px); line-height: 1.12; margin: 0 0 14px; font-weight: 800;\">Windows Server Security Update (November 2026)<\/h1>\n<p style=\"font-size: 18px; color: #eaf6ff; max-width: 800px; margin: 0 auto; line-height: 1.7;\">Microsoft fixed eight Critical Hyper-V vulnerabilities on 10 November. Here is what they mean for Windows VPS and dedicated servers, how to patch any Windows Server, and how UnderHost patched its Windows VPS host nodes the next day.<\/p>\n<\/div>\n<div style=\"background: #FFF7ED; border: 1px solid #FDBA74; border-radius: 16px; padding: 20px 22px; margin: 24px 0;\">\n<h3 style=\"margin: 0 0 10px; color: #9a3412; font-size: 20px;\"><i class=\"fas fa-exclamation-triangle\" style=\"color: #f97316;\"><\/i> Updated 12 November 2026.<\/h3>\n<p style=\"margin: 0; color: #7c2d12; line-height: 1.7;\">UnderHost Windows VPS host nodes in Canada, the Netherlands and Hong Kong were patched during emergency maintenance on 11 November 2026, and every Windows VPS was restarted. The host patch does not update the Windows Server installation inside your VPS, so install this month&#8217;s Windows updates on your server as well.<\/p>\n<\/div>\n<div class=\"uh-blog-excerpt\" style=\"border-left: 4px solid #00D4FF; padding: 18px 20px; margin: 0 0 34px; background: #F8FAFC; color: #1f2937; border-radius: 0 14px 14px 0; box-shadow: 0 8px 28px rgba(13,31,60,0.08); line-height: 1.75;\"><strong style=\"color: #0d1f3c;\">Short answer:<\/strong> Microsoft&#8217;s November 2026 updates fix eight Critical Hyper-V vulnerabilities, four of which could let code inside a virtual machine run on the host. UnderHost patched every Windows VPS host node in <strong>Canada, the Netherlands and Hong Kong on 11 November 2026<\/strong>. Whether you run a Windows VPS, a Windows dedicated server or Hyper-V on your own hardware, at UnderHost or anywhere else, install the November cumulative update. This month also fixes Critical flaws in LDAP, Schannel, CredSSP, IIS and SMB.<\/div>\n<nav class=\"uh-toc\" style=\"background: #ffffff; border: 1px solid #E5E7EB; border-radius: 16px; padding: 20px 22px; margin: 0 0 34px; box-shadow: 0 4px 12px rgba(13,31,60,0.08);\" aria-label=\"Table of contents\">\n<div style=\"font-size: 12px; font-weight: 800; letter-spacing: .06em; text-transform: uppercase; color: #176ea5; margin-bottom: 10px;\"><i class=\"fas fa-list\" style=\"color: #00d4ff;\"><\/i> In this guide<\/div>\n<ol style=\"margin: 0; padding-left: 20px; columns: 2 260px; column-gap: 28px; line-height: 1.9;\">\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#what-microsoft-released\">What Microsoft released on 10 November 2026<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#who-needs-to-act\">Who needs to act<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#critical-hyper-v-vulnerabilities\">The eight Critical Hyper-V vulnerabilities<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#why-hyper-v-flaws-matter\">Why Hyper-V flaws matter on a VPS host<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#what-underhost-did\">What UnderHost did<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#patch-your-windows-server\">Your Windows Server still needs this month&#8217;s updates<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#one-command-check\">One-command check: is your server patched?<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#install-the-updates\">Install the updates<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#fix-a-missing-update\">Update missing or failing? How to fix it<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#hyper-v-on-a-dedicated-server\">Hyper-V on a dedicated server: you are the host<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#reduce-exposure\">Reduce exposure on a Remote Desktop server<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#not-an-underhost-customer\">Not an UnderHost customer? Questions to ask your provider<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#windows-hosting-at-underhost\">Windows hosting at UnderHost<\/a><\/li>\n<li><a style=\"color: #176ea5; text-decoration: none; font-weight: 600;\" href=\"#sources\">Sources<\/a><\/li>\n<\/ol>\n<\/nav>\n<div class=\"uh-post-content\" style=\"color: #1f2937; font-size: 16px; line-height: 1.75;\">\n<h2 id=\"what-microsoft-released\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-info-circle\" style=\"color: #00d4ff;\"><\/i> What Microsoft released on 10 November 2026<\/h2>\n<p style=\"margin: 0 0 18px;\">Microsoft published its November 2026 security updates on Tuesday 10 November. The release lists 1,439 CVEs across Microsoft products, including Chromium-based Edge and Azure Linux entries. Microsoft rates 70 of them Critical.<\/p>\n<ul style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\"><strong>Eight Critical vulnerabilities are in Windows Hyper-V<\/strong>, the virtualization layer that runs virtual machines on a Windows host. All eight are elevation of privilege flaws.<\/li>\n<li style=\"margin: 0 0 8px;\"><strong>Critical flaws also affect Windows Server itself<\/strong>, including LDAP, Windows Search, Schannel, the Credential Security Support Provider (CredSSP), IIS, Message Queuing and the SMB server driver.<\/li>\n<li style=\"margin: 0 0 8px;\"><strong>Only one vulnerability in the whole release was marked as exploited<\/strong> when it was published: an Outlook spoofing flaw rated Moderate. None of the Hyper-V flaws were known to be exploited, and Microsoft rated them &#8220;Exploitation Less Likely&#8221;.<\/li>\n<\/ul>\n<p style=\"margin: 0 0 18px;\">&#8220;Not exploited yet&#8221; is not a reason to wait. Once a fix is public, attackers can compare the patched and unpatched files to find the flaw, so the gap between a patch release and the first working exploit keeps getting shorter. The safest time to patch is straight after release.<\/p>\n<h2 id=\"who-needs-to-act\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-users\" style=\"color: #00d4ff;\"><\/i> Who needs to act<\/h2>\n<p style=\"margin: 0 0 18px;\">This update matters for every Windows Server, wherever it is hosted. What you need to do depends on how you run Windows:<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 640px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">You run<\/th>\n<th style=\"padding: 14px; text-align: left;\">Who patches the host<\/th>\n<th style=\"padding: 14px; text-align: left;\">What you do<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>An UnderHost Windows Cloud VPS<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">UnderHost. Done on 11 November 2026.<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Install the November update inside your VPS.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>A Windows VPS at another provider<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Your provider.<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Install the November update inside your VPS, and ask your provider whether its hosts are patched. See <a style=\"color: #176ea5; font-weight: 600;\" href=\"#not-an-underhost-customer\">questions to ask your provider<\/a>.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Windows Server on a dedicated server<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">You. There is no shared host.<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Install the November update. The Hyper-V flaws only matter if the Hyper-V role is enabled, but the other Critical fixes apply to every server.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Hyper-V on your own dedicated server<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">You. Your server is the host.<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Patch the host first, then every virtual machine on it. See <a style=\"color: #176ea5; font-weight: 600;\" href=\"#hyper-v-on-a-dedicated-server\">Hyper-V on a dedicated server<\/a>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2 id=\"critical-hyper-v-vulnerabilities\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-shield-alt\" style=\"color: #00d4ff;\"><\/i> The eight Critical Hyper-V vulnerabilities<\/h2>\n<p style=\"margin: 0 0 18px;\">The table lists Microsoft&#8217;s data for each Hyper-V CVE rated Critical this month. Seven of them affect Windows Server. The eighth, CVE-2026-113753, affects Windows 11 version 26H1 only.<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 680px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">CVE<\/th>\n<th style=\"padding: 14px; text-align: left;\">CVSS 3.1<\/th>\n<th style=\"padding: 14px; text-align: left;\">Windows Server versions<\/th>\n<th style=\"padding: 14px; text-align: left;\">What Microsoft says<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113753\">CVE-2026-113753<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8.2<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows 11 26H1<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">An attacker could gain Virtual Trust Level 1 (VTL1) privileges.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113856\">CVE-2026-113856<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.8<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2022, 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Code inside a guest VM could run on the host<\/strong>, as the virtual machine worker process.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113860\">CVE-2026-113860<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.0<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2019, 2022, 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">An attacker could gain administrator privileges.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113861\">CVE-2026-113861<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.5<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2016 to 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Code inside a guest VM could run on the host<\/strong>, as the virtual machine worker process.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113864\">CVE-2026-113864<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">6.4<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2016 to 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Use after free that allows local elevation of privilege.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113865\">CVE-2026-113865<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.8<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2022, 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Code inside a guest VM could run on the host<\/strong>, as the virtual machine worker process.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119947\">CVE-2026-119947<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.5<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2016 to 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>Code inside a guest VM could run on the host<\/strong>, as the virtual machine worker process.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119960\">CVE-2026-119960<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.5<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Use of an uninitialized resource that allows local elevation of privilege.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"margin: 0 0 18px;\">Most of these flaws are rated high attack complexity, because the attacker has to win a race condition. That makes them harder to exploit, not impossible. Microsoft still rates all eight Critical, because a successful attack crosses the boundary between a virtual machine and the host.<\/p>\n<h2 id=\"why-hyper-v-flaws-matter\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-server\" style=\"color: #00d4ff;\"><\/i> Why Hyper-V flaws matter on a VPS host<\/h2>\n<p style=\"margin: 0 0 18px;\">Every UnderHost Windows Cloud VPS is a Hyper-V virtual machine on a physical host node. The hypervisor keeps every virtual machine separate from the host and from the other virtual machines on the same node. That isolation is the basic promise of virtual hosting.<\/p>\n<figure style=\"margin: 26px 0;\"><img loading=\"lazy\" decoding=\"async\" style=\"width: 100%; height: auto; border-radius: 16px; display: block; border: 1px solid #E5E7EB;\" src=\"https:\/\/underhost.com\/blog\/wp-content\/uploads\/2026\/11\/windows-host-isolation-diagram.webp\" alt=\"Diagram of a host node running three customer VPS guests above an isolation boundary and the hypervisor layer\" width=\"1200\" height=\"640\" \/><figcaption style=\"font-size: 14px; color: #6b7280; margin-top: 8px; text-align: center;\">The hypervisor layer is the provider&#8217;s to patch. The operating system inside your VPS is yours.<\/figcaption><\/figure>\n<p style=\"margin: 0 0 18px;\">A guest-to-host escape breaks that promise. Four of this month&#8217;s Critical Hyper-V flaws let code running inside a guest virtual machine run on the host. An attacker who reaches the host could, in principle, read or change data in other virtual machines, stop them, or install malware on the host.<\/p>\n<p style=\"margin: 0 0 18px;\">The starting point can be any virtual machine on the node: one the attacker rents, or a customer server that was already compromised. That is why a host node has to be patched even when every customer on it runs a fully updated server.<\/p>\n<h2 id=\"what-underhost-did\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-check-circle\" style=\"color: #00d4ff;\"><\/i> What UnderHost did<\/h2>\n<p style=\"margin: 0 0 18px;\">UnderHost installed Microsoft&#8217;s November 2026 security updates on the Hyper-V host nodes behind <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/windows-vps.php\">Windows Cloud VPS<\/a> on <strong>11 November 2026<\/strong>, the day after release, in all three locations:<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 480px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">Location<\/th>\n<th style=\"padding: 14px; text-align: left;\">Region<\/th>\n<th style=\"padding: 14px; text-align: left;\">Status<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Canada<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">North America<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Patched on 11 November 2026<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Netherlands<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Europe<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Patched on 11 November 2026<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Hong Kong<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Asia Pacific<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Patched on 11 November 2026<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<figure style=\"margin: 26px 0;\"><img loading=\"lazy\" decoding=\"async\" style=\"width: 100%; height: auto; border-radius: 16px; display: block; border: 1px solid #E5E7EB;\" src=\"https:\/\/underhost.com\/blog\/wp-content\/uploads\/2026\/11\/windows-server-hyper-v-uh-shield.webp\" alt=\"Laptop with the Windows logo, a monitor with Hyper-V Manager, an UnderHost shield and a rack server on a desk\" width=\"1200\" height=\"675\" \/><figcaption style=\"font-size: 14px; color: #6b7280; margin-top: 8px; text-align: center;\">Windows Server with Hyper-V: the host layer was patched on 11 November 2026.<\/figcaption><\/figure>\n<p style=\"margin: 0 0 18px;\">This was emergency maintenance. We patched immediately rather than waiting for a scheduled maintenance window, because a host node flaw puts every server on that node at risk, including servers whose owners did everything right.<\/p>\n<p style=\"margin: 0 0 18px;\">Installing the host updates meant <strong>restarting every Windows VPS<\/strong> in the three locations on 11 November. We know an unplanned restart is disruptive, especially for trading platforms, bots and other always-on software, and we did not take that decision lightly. Protecting every customer on each node outweighed the cost of waiting.<\/p>\n<p style=\"margin: 0 0 18px;\">If something on your VPS did not come back after the restart, connect with Remote Desktop and start it again. To avoid this next time, set important software to start with Windows, for example as a Windows service or a scheduled task that runs at startup.<\/p>\n<div style=\"background: #FFF7ED; border: 1px solid #FDBA74; border-radius: 16px; padding: 20px 22px; margin: 24px 0;\">\n<h3 style=\"margin: 0 0 10px; color: #9a3412; font-size: 20px;\"><i class=\"fas fa-exclamation-triangle\" style=\"color: #f97316;\"><\/i> The host patch does not update your VPS.<\/h3>\n<p style=\"margin: 0; color: #7c2d12; line-height: 1.7;\">The host updates protect the hypervisor layer. They do not change the Windows Server installation inside your VPS. You have full administrator access to your server, so installing its Windows updates is your job. The next sections show how.<\/p>\n<\/div>\n<h2 id=\"patch-your-windows-server\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-exclamation-triangle\" style=\"color: #00d4ff;\"><\/i> Your Windows Server still needs this month&#8217;s updates<\/h2>\n<p style=\"margin: 0 0 18px;\">Several Critical flaws this month are in components that run inside a Windows Server VPS. The ones that matter most on an internet-facing server:<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 720px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">Component<\/th>\n<th style=\"padding: 14px; text-align: left;\">CVE<\/th>\n<th style=\"padding: 14px; text-align: left;\">CVSS 3.1<\/th>\n<th style=\"padding: 14px; text-align: left;\">Why it matters on a VPS<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">LDAP<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119958\">CVE-2026-119958<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">9.8<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution with no login, through crafted LDAP calls. Highest risk on domain controllers and servers that expose LDAP.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows Search<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-116928\">CVE-2026-116928<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">9.8<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution over a network, no login needed.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Schannel (TLS)<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119952\">CVE-2026-119952<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8.1<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">A crafted packet to a TLS service could run code. Schannel handles TLS for IIS and other Windows services.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">CredSSP<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119962\">CVE-2026-119962<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8.1<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution in the protocol Remote Desktop uses for Network Level Authentication.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">IIS<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119961\">CVE-2026-119961<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8.1<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution on servers that host websites with IIS.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Message Queuing<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-116710\">CVE-2026-116710<\/a> and 4 more<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8.1<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution where the MSMQ service is installed.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">SMB server (srvnet.sys)<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113825\">CVE-2026-113825<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.5<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Code execution by an authenticated attacker over the network.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote Desktop Services<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119957\">CVE-2026-119957<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.8<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Local elevation of privilege.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">TCP\/IP<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-113859\">CVE-2026-113859<\/a><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">7.5<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Remote code execution from an adjacent network. Windows Server 2025 only.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"margin: 0 0 18px;\">The fixes come in the monthly cumulative update for each Windows Server version:<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 520px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">Windows Server version<\/th>\n<th style=\"padding: 14px; text-align: left;\">Build<\/th>\n<th style=\"padding: 14px; text-align: left;\">November 2026 update<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows Server 2025<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">26100<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">KB5131080 (hotpatch-enrolled servers: KB5131077)<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows Server 2022<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">20348<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">KB5131090<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows Server 2019<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">17763<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">KB5131085<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">Windows Server 2016<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">14393<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">KB5131291<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"margin: 0 0 18px;\">UnderHost Windows Cloud VPS plans run licensed Windows Server 2019, 2022 or 2025. A later cumulative update includes these fixes, so a server with December&#8217;s update installed is covered too.<\/p>\n<h2 id=\"one-command-check\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-terminal\" style=\"color: #00d4ff;\"><\/i> One-command check: is your server patched?<\/h2>\n<p style=\"margin: 0 0 18px;\">Connect to your VPS with Remote Desktop, open <strong>PowerShell<\/strong>, and paste this command. It finds your Windows Server version and checks whether the matching November 2026 update is installed. It changes nothing on the server.<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>$os = Get-CimInstance Win32_OperatingSystem\r\n$kb = @{ '14393' = @('KB5131291'); '17763' = @('KB5131085')\r\n         '20348' = @('KB5131090'); '26100' = @('KB5131080','KB5131077') }[$os.BuildNumber]\r\nif ($os.ProductType -eq 1 -or -not $kb) {\r\n  \"$($os.Caption) (build $($os.BuildNumber)): this check covers Windows Server 2016 to 2025 only.\"\r\n} elseif (Get-HotFix -Id $kb -ErrorAction SilentlyContinue) {\r\n  \"$($os.Caption): the November 2026 update ($($kb -join ' or ')) is installed.\"\r\n} else {\r\n  \"$($os.Caption): $($kb -join ' or ') not found. Run Windows Update and restart. A newer cumulative update also covers you.\"\r\n}<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">You will see one of three results: the update is installed, the update is missing, or your system is not a Windows Server version this check covers. If it is missing, install it as shown below, and if that fails, see <a style=\"color: #176ea5; font-weight: 600;\" href=\"#fix-a-missing-update\">Update missing or failing? How to fix it<\/a>. To see the most recent updates on the server instead, run:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID, Description, InstalledOn<\/code><\/pre>\n<h2 id=\"install-the-updates\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-download\" style=\"color: #00d4ff;\"><\/i> Install the updates<\/h2>\n<p style=\"margin: 0 0 18px;\">Take a backup or a snapshot first if your server runs anything important. Then use whichever method suits your server.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">With the desktop (Desktop Experience)<\/h3>\n<ol style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\">Open <strong>Settings<\/strong>, then <strong>Windows Update<\/strong> (on Windows Server 2019: <strong>Update &amp; Security<\/strong>, then <strong>Windows Update<\/strong>).<\/li>\n<li style=\"margin: 0 0 8px;\">Click <strong>Check for updates<\/strong> and let the cumulative update install.<\/li>\n<li style=\"margin: 0 0 8px;\">Restart when Windows asks. The fixes are not active until the server restarts.<\/li>\n<\/ol>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">From PowerShell or Server Core<\/h3>\n<p style=\"margin: 0 0 18px;\">Windows Server includes the <code>sconfig<\/code> tool. Run it, choose the <strong>Install updates<\/strong> option, and pick all quality updates:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>sconfig<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">After the update installs, restart the server and run the check again:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Restart-Computer<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">A restart disconnects your Remote Desktop session for a few minutes. If you run trading platforms or other always-on software, plan the restart for a quiet moment, and check that the software starts again afterwards.<\/p>\n<h2 id=\"fix-a-missing-update\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-wrench\" style=\"color: #00d4ff;\"><\/i> Update missing or failing? How to fix it<\/h2>\n<p style=\"margin: 0 0 18px;\">If the check says the November update is not installed, work through these steps in order. Run PowerShell as Administrator.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">1. Finish a pending restart<\/h3>\n<p style=\"margin: 0 0 18px;\">Updates often install but wait for a restart. This returns <code>True<\/code> when Windows is waiting to restart:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Test-Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\RebootPending'<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">If it returns <code>True<\/code>, restart the server with <code>Restart-Computer<\/code> and run the check again.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">2. Check free disk space<\/h3>\n<p style=\"margin: 0 0 18px;\">A cumulative update needs several gigabytes free on the system drive. Check it with:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-PSDrive C | Select-Object @{n='FreeGB';e={[math]::Round($_.Free\/1GB,1)}}<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">If less than about 10 GB is free, delete old files or empty the recycle bin, then try Windows Update again.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">3. Check whether a policy holds updates back<\/h3>\n<p style=\"margin: 0 0 18px;\">Group Policy or WSUS settings can delay or block updates. If this command shows a <code>WUServer<\/code> address or deferral settings, updates come from that server or wait for the set number of days:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-ItemProperty 'HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate' -ErrorAction SilentlyContinue<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">If nothing is shown, no policy is set. If you did not set these values yourself, ask whoever manages the server before you change them.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">4. Repair Windows Update (one command)<\/h3>\n<p style=\"margin: 0 0 18px;\">If Windows Update fails with an error or keeps offering the same update, paste this block. It repairs the Windows component store, resets the Windows Update download cache and starts the services again. It can take 15 to 30 minutes. Restart the server afterwards, then run Windows Update again.<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>DISM \/Online \/Cleanup-Image \/RestoreHealth\r\nsfc \/scannow\r\nStop-Service wuauserv, bits, cryptsvc -Force\r\nRename-Item C:\\Windows\\SoftwareDistribution \"SoftwareDistribution.old.$(Get-Date -Format yyyyMMddHHmm)\"\r\nStart-Service cryptsvc, bits, wuauserv\r\n\"Repair finished. Restart the server, then run Windows Update again.\"<\/code><\/pre>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">5. Install the update by hand<\/h3>\n<p style=\"margin: 0 0 18px;\">If Windows Update still fails, download the update for your version from the <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=KB5131090\">Microsoft Update Catalog<\/a>. Search for the KB number from the table above (KB5131080, KB5131090, KB5131085 or KB5131291), download the <code>.msu<\/code> file, then install it:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>wusa.exe C:\\Updates\\your-update-file.msu \/quiet \/norestart\r\nRestart-Computer<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">If the catalog lists more than one file for your version, follow the install order in Microsoft&#8217;s article for that KB number. To see why an earlier attempt failed, run <code>Get-WindowsUpdateLog<\/code>, which saves a readable <code>WindowsUpdate.log<\/code> to your desktop.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">6. Running Windows Server 2012 or 2012 R2?<\/h3>\n<p style=\"margin: 0 0 18px;\">These versions are past the end of their normal support, and their security updates install only on servers enrolled in Extended Security Updates. Microsoft&#8217;s November 2026 data lists KB5126835 for Windows Server 2012 and KB5126836 for 2012 R2, but they cover far fewer vulnerabilities than the newer versions. The Critical LDAP flaw, for example, has no fix listed for 2012. Move the workload to Windows Server 2022 or 2025. A new <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/windows-vps.php\">Windows Cloud VPS<\/a> with a supported version is often the quickest way to do that.<\/p>\n<p style=\"margin: 0 0 18px;\">Still stuck? UnderHost customers can open a ticket through @CustomerPanel, or use our <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/server-management.php\">emergency support<\/a> at $39.95 an hour.<\/p>\n<h2 id=\"hyper-v-on-a-dedicated-server\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-server\" style=\"color: #00d4ff;\"><\/i> Hyper-V on a dedicated server: you are the host<\/h2>\n<p style=\"margin: 0 0 18px;\">If you run Hyper-V on your own dedicated server, for test labs, client environments or virtual machines you resell, your server is the host node. The eight Hyper-V fixes are yours to install, and they matter most if anyone other than you can run code inside one of your virtual machines.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">1. Check whether the Hyper-V role is installed<\/h3>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-WindowsFeature -Name Hyper-V | Select-Object Name, InstallState<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">If <code>InstallState<\/code> is <code>Installed<\/code>, the Hyper-V fixes apply to this server. If it is <code>Available<\/code>, Hyper-V is not enabled, and you only need the regular update.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">2. See what happens to your virtual machines during the restart<\/h3>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-VM | Select-Object Name, State, AutomaticStopAction, AutomaticStartAction<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\"><code>AutomaticStopAction<\/code> decides whether each virtual machine is saved, shut down or turned off when the host restarts. <code>AutomaticStartAction<\/code> decides whether it starts again afterwards. Set important virtual machines to start automatically before you patch.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">3. Patch in the right order<\/h3>\n<ol style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\"><strong>Back up<\/strong> the virtual machines you cannot afford to lose. A checkpoint is not a backup.<\/li>\n<li style=\"margin: 0 0 8px;\"><strong>Update the host<\/strong> with Windows Update or <code>sconfig<\/code>, then restart it.<\/li>\n<li style=\"margin: 0 0 8px;\"><strong>Check that every virtual machine is running again:<\/strong> <code>Get-VM | Where-Object State -ne 'Running'<\/code><\/li>\n<li style=\"margin: 0 0 8px;\"><strong>Update each virtual machine<\/strong> that runs Windows, and restart it.<\/li>\n<\/ol>\n<p style=\"margin: 0 0 18px;\">On a Hyper-V failover cluster, use Cluster-Aware Updating, so virtual machines move to another node while each host restarts.<\/p>\n<h2 id=\"reduce-exposure\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-lock\" style=\"color: #00d4ff;\"><\/i> Reduce exposure on a Remote Desktop server<\/h2>\n<p style=\"margin: 0 0 18px;\">Patching closes these flaws. These checks reduce what an attacker can reach the next time a flaw appears.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">1. See which risky services are listening<\/h3>\n<p style=\"margin: 0 0 18px;\">This lists listeners on the RPC, NetBIOS, SMB, LDAP, Message Queuing and Remote Desktop ports:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Get-NetTCPConnection -State Listen | Where-Object LocalPort -in 135,139,445,389,636,1801,3389 | Sort-Object LocalPort | Select-Object LocalAddress, LocalPort, OwningProcess<\/code><\/pre>\n<p style=\"margin: 0 0 18px;\">A single-server VPS rarely needs SMB (445), LDAP (389 and 636) or Message Queuing (1801) open to the internet. Block what you do not use in Windows Defender Firewall.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">2. Keep Network Level Authentication on<\/h3>\n<p style=\"margin: 0 0 18px;\">Network Level Authentication (NLA) makes users sign in before a full Remote Desktop session starts. This command returns <code>1<\/code> when it is on:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>(Get-CimInstance -Namespace root\/cimv2\/TerminalServices -ClassName Win32_TSGeneralSetting -Filter \"TerminalName='RDP-tcp'\").UserAuthenticationRequired<\/code><\/pre>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">3. Allow Remote Desktop only from your own IP<\/h3>\n<p style=\"margin: 0 0 18px;\">If you always connect from a fixed IP address, limit the built-in Remote Desktop firewall rules to it. Replace <code>203.0.113.10<\/code> with your own public IP:<\/p>\n<pre style=\"background: #0D1F3C; color: #eaf6ff; padding: 18px 20px; border-radius: 14px; overflow-x: auto; line-height: 1.7; font-size: 15px;\"><code>Set-NetFirewallRule -DisplayGroup \"Remote Desktop\" -RemoteAddress 203.0.113.10<\/code><\/pre>\n<div style=\"background: #FFF7ED; border: 1px solid #FDBA74; border-radius: 16px; padding: 20px 22px; margin: 24px 0;\">\n<h3 style=\"margin: 0 0 10px; color: #9a3412; font-size: 20px;\"><i class=\"fas fa-exclamation-triangle\" style=\"color: #f97316;\"><\/i> Check your IP before you run this.<\/h3>\n<p style=\"margin: 0; color: #7c2d12; line-height: 1.7;\">If your IP address changes, or you enter the wrong one, you will lock yourself out of Remote Desktop, and you will need your provider&#8217;s help to get back in. UnderHost customers can contact support through @CustomerPanel. To undo the rule, run the same command with <code>-RemoteAddress Any<\/code>.<\/p>\n<\/div>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">4. Use strong, unique passwords<\/h3>\n<p style=\"margin: 0 0 18px;\">Remote Desktop servers are scanned for weak passwords around the clock. Use a long, unique password for every administrator account, and remove accounts you no longer use. For more, see our <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/docs.underhost.com\/article\/windows-vps-rdp\/\">Windows VPS and Remote Desktop guide<\/a>.<\/p>\n<h2 id=\"not-an-underhost-customer\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-question-circle\" style=\"color: #00d4ff;\"><\/i> Not an UnderHost customer? Questions to ask your provider<\/h2>\n<p style=\"margin: 0 0 18px;\">Everything in the patching sections above works on any Windows Server, wherever it is hosted. The host is the part you cannot patch yourself on a VPS. Ask your provider:<\/p>\n<ul style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\">Have your host nodes received Microsoft&#8217;s November 2026 updates, including the Hyper-V fixes? On what date?<\/li>\n<li style=\"margin: 0 0 8px;\">Will my server be restarted for host maintenance, and how will you tell me?<\/li>\n<li style=\"margin: 0 0 8px;\">Which Windows Server versions do you offer, and is the licence included?<\/li>\n<li style=\"margin: 0 0 8px;\">Do you install Windows updates inside my server, or is that my job?<\/li>\n<\/ul>\n<p style=\"margin: 0 0 18px;\">Clear, dated answers are a good sign. If you would rather host with a provider that patched its Windows VPS host nodes the day after release, see the options below.<\/p>\n<h2 id=\"windows-hosting-at-underhost\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-tags\" style=\"color: #00d4ff;\"><\/i> Windows hosting at UnderHost<\/h2>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">Windows Cloud VPS<\/h3>\n<p style=\"margin: 0 0 18px;\">Our new Windows Cloud VPS line-up has nine plans, from 1 vCore to 32 vCores, in Canada, the Netherlands and Hong Kong. You choose the location at checkout.<\/p>\n<div style=\"overflow-x: auto; margin: 26px 0; border: 1px solid #E5E7EB; border-radius: 14px; -webkit-overflow-scrolling: touch;\">\n<table style=\"width: 100%; border-collapse: collapse; background: #ffffff; color: #1f2937; font-size: 15px; line-height: 1.55; margin: 0; min-width: 680px;\">\n<thead>\n<tr style=\"background: #0D1F3C; color: #fff;\">\n<th style=\"padding: 14px; text-align: left;\">Plan<\/th>\n<th style=\"padding: 14px; text-align: left;\">CPU<\/th>\n<th style=\"padding: 14px; text-align: left;\">RAM<\/th>\n<th style=\"padding: 14px; text-align: left;\">NVMe storage<\/th>\n<th style=\"padding: 14px; text-align: left;\">Price<\/th>\n<th style=\"padding: 14px; text-align: left;\"><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 1<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">1 vCore<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">30 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$23.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=131\" aria-label=\"Order CVWIN 1\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 2<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">2 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">4 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">50 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$37.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=132\" aria-label=\"Order CVWIN 2\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 3<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">4 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">100 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$67.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=133\" aria-label=\"Order CVWIN 3\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 4<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">6 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">12 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">150 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$97.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=134\" aria-label=\"Order CVWIN 4\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 5<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">8 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">16 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">200 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$127.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=401\" aria-label=\"Order CVWIN 5\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 6<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">12 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">24 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">300 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$187.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=402\" aria-label=\"Order CVWIN 6\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 7<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">16 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">32 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">400 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$247.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=403\" aria-label=\"Order CVWIN 7\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 8<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">24 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">48 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">600 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$367.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=404\" aria-label=\"Order CVWIN 8\">Order now<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><strong>CVWIN 9<\/strong><\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">32 vCores<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">64 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">800 GB<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\">$487.95 \/ month<\/td>\n<td style=\"padding: 14px; border-top: 1px solid #E5E7EB; vertical-align: top;\"><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 8px 16px; border-radius: 8px; text-decoration: none; font-weight: 800; font-size: 14px; display: inline-block; white-space: nowrap;\" href=\"https:\/\/customerpanel.ca\/client\/cart.php?a=add&amp;pid=405\" aria-label=\"Order CVWIN 9\">Order now<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"margin: 0 0 18px;\">Every plan includes:<\/p>\n<ul style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\">Licensed Windows Server 2019, 2022 or 2025<\/li>\n<li style=\"margin: 0 0 8px;\">Full administrator access over Remote Desktop<\/li>\n<li style=\"margin: 0 0 8px;\">NVMe storage and unmetered bandwidth<\/li>\n<li style=\"margin: 0 0 8px;\">One dedicated IP address (additional IPv4 addresses are $4.95\/month)<\/li>\n<li style=\"margin: 0 0 8px;\">Free DDoS protection<\/li>\n<li style=\"margin: 0 0 8px;\">24\/7 support<\/li>\n<\/ul>\n<p style=\"margin: 0 0 18px;\">Windows Cloud VPS suits Remote Desktop work, MetaTrader 4 and 5 or cTrader, .NET applications, IIS websites and MSSQL databases. Prices are in USD and current on 12 November 2026. See the <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/windows-vps.php\">Windows Cloud VPS page<\/a> for the latest prices and to order.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">Dedicated servers<\/h3>\n<p style=\"margin: 0 0 18px;\">UnderHost offers Windows Server on <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/servers.php\">dedicated servers<\/a>, for workloads that need a whole machine or to run your own Hyper-V host. Contact our team through @CustomerPanel to choose the Windows Server version and licence for your server.<\/p>\n<h3 style=\"color: #0d1f3c; font-size: 21px; line-height: 1.3; margin: 26px 0 10px;\">Windows Server Management<\/h3>\n<p style=\"margin: 0 0 18px;\">If you would rather not patch Windows servers yourself, <a style=\"color: #176ea5; font-weight: 600;\" href=\"https:\/\/underhost.com\/server-management.php\">UnderHost Server Management<\/a> covers Windows Server, including patch management, Hyper-V, IIS, SQL Server and Active Directory. Management for Windows servers starts at $99.95 a month and includes 24\/7 monitoring and security patching. For one-off help, emergency support is $39.95 an hour.<\/p>\n<h2 id=\"sources\" style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 34px 0 14px; scroll-margin-top: 90px;\"><i class=\"fas fa-book\" style=\"color: #00d4ff;\"><\/i> Sources<\/h2>\n<ul style=\"margin: 0 0 24px; padding-left: 22px;\">\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-us\/releaseNote\/2026-Nov\">Microsoft Security Update Guide: November 2026 release notes<\/a><\/li>\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/www.csa.gov.sg\/alerts-and-advisories\/alerts\/al-2026-160\/\">Cyber Security Agency of Singapore: November 2026 Monthly Patch (AL-2026-160)<\/a><\/li>\n<li style=\"margin: 0 0 8px;\">Microsoft&#8217;s CVE pages, linked in the tables above<\/li>\n<\/ul>\n<p style=\"margin: 0 0 18px;\">Need help with an update? Open a ticket through <a href=\"https:\/\/customerpanel.ca\/client\/\">@CustomerPanel<\/a>.<\/p>\n<div class=\"uh-section-divider\" style=\"max-width: 1080px; margin: 44px auto; text-align: center; line-height: 0; background: linear-gradient(90deg,transparent,rgba(0,212,255,0.40) 30%,rgba(23,110,165,0.24) 50%,rgba(0,212,255,0.40) 70%,transparent) no-repeat center center; background-size: 100% 1px;\" aria-hidden=\"true\"><img loading=\"lazy\" decoding=\"async\" style=\"width: 32px; height: 32px; display: inline-block; vertical-align: middle; border-radius: 8px; filter: drop-shadow(0 0 14px rgba(0,212,255,0.30));\" src=\"https:\/\/cdn.underhost.com\/android-chrome-192x192.webp\" alt=\"\" width=\"32\" height=\"32\" \/><\/div>\n<\/div>\n<div class=\"uh-blog-cta\" style=\"background: linear-gradient(135deg,#0D1F3C 0%,#125A8A 58%,#176EA5 100%); color: #ffffff; padding: 36px 24px; border-radius: 20px; text-align: center; margin: 44px 0; box-shadow: 0 20px 40px -15px rgba(13,31,60,0.32);\">\n<h2 style=\"margin: 0 0 12px; font-size: 28px; line-height: 1.25; color: #ffffff;\">Run Windows Server on patched infrastructure<\/h2>\n<p style=\"font-size: 17px; margin: 0 auto 22px; color: #eaf6ff; max-width: 720px; line-height: 1.7;\">Windows Cloud VPS in Canada, the Netherlands and Hong Kong from $23.95 a month, with licensed Windows Server, full RDP access and free DDoS protection. Dedicated servers and Windows Server management are available too.<\/p>\n<p><a style=\"background: linear-gradient(90deg,#00D4FF,#0077FF); color: #ffffff; padding: 13px 28px; border-radius: 10px; text-decoration: none; font-weight: 800; display: inline-block; margin: 8px;\" href=\"https:\/\/underhost.com\/windows-vps.php\">View Windows VPS plans<\/a><a style=\"background: transparent; color: #ffffff; padding: 12px 28px; border-radius: 10px; text-decoration: none; font-weight: 800; display: inline-block; margin: 8px; border: 1px solid rgba(255,255,255,0.32);\" href=\"https:\/\/customerpanel.ca\/client\/\">Contact @CustomerPanel<\/a><\/p>\n<\/div>\n<div id=\"faq\" class=\"uh-faq-section\" style=\"margin: 34px 0; scroll-margin-top: 90px;\">\n<h2 style=\"color: #0d1f3c; font-size: 28px; line-height: 1.25; margin: 0 0 18px; border-bottom: 2px solid rgba(0,212,255,0.22); padding-bottom: 10px;\">Frequently asked questions<\/h2>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Do I need to do anything after UnderHost patched the host nodes?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">Yes. The host patch protects the hypervisor layer, not the Windows Server installation inside your VPS. Install the November 2026 cumulative update on your server, then restart it.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Which update fixes the November 2026 vulnerabilities on Windows Server?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">KB5131080 for Windows Server 2025 (KB5131077 on hotpatch-enrolled servers), KB5131090 for Windows Server 2022, KB5131085 for Windows Server 2019 and KB5131291 for Windows Server 2016. Any later cumulative update also includes the fixes.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Were the Hyper-V vulnerabilities exploited?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">Not when they were published. Microsoft marked them as not exploited and rated them Exploitation Less Likely. Attackers can study a published fix to build an exploit, which is why host nodes were patched the day after release.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">What is a guest-to-host escape?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">A flaw that lets code running inside a virtual machine run on the physical host underneath it. From the host, an attacker could reach other virtual machines on the same node. Four of this month&#8217;s Critical Hyper-V flaws are of this type.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Why was my Windows VPS restarted on 11 November?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">UnderHost installed the Critical Hyper-V fixes from Microsoft on every Windows VPS host node as emergency maintenance, and the update required each VPS to restart. If software did not come back afterwards, connect with Remote Desktop and start it again.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Which locations were patched?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">All UnderHost Windows Cloud VPS host nodes in Canada, the Netherlands and Hong Kong, on 11 November 2026.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Does installing the update restart my VPS?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">The update needs a restart to take effect, and your Remote Desktop session disconnects while the server restarts. Plan the restart for a quiet time if you run always-on software such as trading platforms.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">I run Windows Server on a dedicated server. What should I do?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">Install the November 2026 cumulative update and restart the server. If the Hyper-V role is enabled, your server is the host: patch it first, then update every Windows virtual machine on it.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Do the Hyper-V flaws affect a server without the Hyper-V role?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">They are in Hyper-V, so they matter on servers with the Hyper-V role enabled and on virtual machines hosted on Hyper-V. Install the update anyway, because the same cumulative update fixes the other Critical flaws.<\/p>\n<\/div>\n<div style=\"margin-top: 18px; background: #F8FAFC; padding: 18px 20px; border-radius: 14px; border: 1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color: #0d1f3c; margin: 0 0 8px; font-size: 19px;\">Does this apply if my server is not hosted at UnderHost?<\/h3>\n<p style=\"margin: 0; color: #1f2937; line-height: 1.7;\">Yes. The vulnerabilities and the updates are the same for every Windows Server. The check and install steps in this guide work on any provider. On a VPS, ask your provider whether its host nodes are patched.<\/p>\n<\/div>\n<\/div>\n<p><script type=\"application\/ld+json\">{\"@context\": \"https:\/\/schema.org\", \"@type\": \"FAQPage\", \"mainEntity\": [{\"@type\": \"Question\", \"name\": \"Do I need to do anything after UnderHost patched the host nodes?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Yes. The host patch protects the hypervisor layer, not the Windows Server installation inside your VPS. Install the November 2026 cumulative update on your server, then restart it.\"}}, {\"@type\": \"Question\", \"name\": \"Which update fixes the November 2026 vulnerabilities on Windows Server?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"KB5131080 for Windows Server 2025 (KB5131077 on hotpatch-enrolled servers), KB5131090 for Windows Server 2022, KB5131085 for Windows Server 2019 and KB5131291 for Windows Server 2016. Any later cumulative update also includes the fixes.\"}}, {\"@type\": \"Question\", \"name\": \"Were the Hyper-V vulnerabilities exploited?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Not when they were published. Microsoft marked them as not exploited and rated them Exploitation Less Likely. Attackers can study a published fix to build an exploit, which is why host nodes were patched the day after release.\"}}, {\"@type\": \"Question\", \"name\": \"What is a guest-to-host escape?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"A flaw that lets code running inside a virtual machine run on the physical host underneath it. From the host, an attacker could reach other virtual machines on the same node. Four of this month's Critical Hyper-V flaws are of this type.\"}}, {\"@type\": \"Question\", \"name\": \"Why was my Windows VPS restarted on 11 November?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"UnderHost installed the Critical Hyper-V fixes from Microsoft on every Windows VPS host node as emergency maintenance, and the update required each VPS to restart. If software did not come back afterwards, connect with Remote Desktop and start it again.\"}}, {\"@type\": \"Question\", \"name\": \"Which locations were patched?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"All UnderHost Windows Cloud VPS host nodes in Canada, the Netherlands and Hong Kong, on 11 November 2026.\"}}, {\"@type\": \"Question\", \"name\": \"Does installing the update restart my VPS?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"The update needs a restart to take effect, and your Remote Desktop session disconnects while the server restarts. Plan the restart for a quiet time if you run always-on software such as trading platforms.\"}}, {\"@type\": \"Question\", \"name\": \"I run Windows Server on a dedicated server. What should I do?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Install the November 2026 cumulative update and restart the server. If the Hyper-V role is enabled, your server is the host: patch it first, then update every Windows virtual machine on it.\"}}, {\"@type\": \"Question\", \"name\": \"Do the Hyper-V flaws affect a server without the Hyper-V role?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"They are in Hyper-V, so they matter on servers with the Hyper-V role enabled and on virtual machines hosted on Hyper-V. Install the update anyway, because the same cumulative update fixes the other Critical flaws.\"}}, {\"@type\": \"Question\", \"name\": \"Does this apply if my server is not hosted at UnderHost?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Yes. The vulnerabilities and the updates are the same for every Windows Server. The check and install steps in this guide work on any provider. On a VPS, ask your provider whether its host nodes are patched.\"}}]}<\/script><\/p>\n<p><!-- uh-related-start --><\/p>\n<div style=\"background: #F4F8FC; border: 1px solid #DCE7F3; border-radius: 14px; padding: 18px 22px; margin: 32px 0 8px;\">\n<h2 style=\"margin: 0 0 12px; font-size: 22px;\">Related guides<\/h2>\n<ul style=\"margin: 0; padding-left: 20px;\">\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/important-security-alert-patch-your-windows-server-immediately\/\">Important Security Alert: Patch Your Windows Server Immediately<\/a><\/li>\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/underhost-supported-operating-systems\/\">UnderHost&#8217;s Supported Operating Systems (Updated October 2026)<\/a><\/li>\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/php-security-release-october-2026-patch-guide\/\">PHP Critical Security Update (October 2026): Patch Guide<\/a><\/li>\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/nodejs-security-update-october-2026-cve-2026-111497\/\">Node.js Security Update (October 2026): CVE-2026-111497<\/a><\/li>\n<li style=\"margin: 0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/cve-2026-31431-copy-fail-linux-server-patch-guide\/\">CVE-2026-31431 \u2018Copy Fail\u2019: Why Linux Server Owners Should Patch Now<\/a><\/li>\n<\/ul>\n<\/div>\n<p><!-- uh-related-end --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft fixed eight Critical Hyper-V vulnerabilities on 10 November 2026. What they mean for Windows VPS and dedicated servers, how to check and patch any Windows Server, and how UnderHost patched its Windows VPS host nodes the next day.<\/p>\n","protected":false},"author":20904,"featured_media":7063,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[81,203],"tags":[120,188,186,212],"class_list":["post-7050","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-guides","category-security","tag-tag-cloud-vps","tag-patch","tag-security-updates","tag-windows-server"],"_links":{"self":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/7050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/users\/20904"}],"replies":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/comments?post=7050"}],"version-history":[{"count":11,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/7050\/revisions"}],"predecessor-version":[{"id":7066,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/7050\/revisions\/7066"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/media\/7063"}],"wp:attachment":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/media?parent=7050"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/categories?post=7050"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/tags?post=7050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}