This non-security out-of-band (OOB) update for Windows Server 2022 (KB5136487) is cumulative. It includes updates from previous releases, along with additional non-security improvements.
Tip
To learn more about Windows out-of-band (OOB) updates, including the differences between security and non-security updates and guidance for deploying them, see Windows out-of-band (OOB) updates.
Improvements
This out-of-band update contains fixes and quality improvements from KB5131090 (released November 10, 2026). The following summary outlines key issues addressed by this update. The bold text within the brackets indicates the item or area of the change.
- [Licensing and Activation] Fixed: An issue where certain Windows licensing and activation operations using the Software Licensing Management Tool (SLMGR) might fail with error 0x80041008 (Invalid parameter). This issue primarily affected organizations using slmgr.vbs commands or automated processes to configure Key Management Service (KMS) activation, install product keys, or manage Windows licensing. Devices that were already activated remained activated, and devices with existing KMS configurations that did not require additional slmgr.vbs commands were not affected.
If you've already installed previous updates, your device will download and install only the new updates included in this package.
Windows Server 2022 servicing stack update (KB5131089) - 20348.5859
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Servicing stack updates.
Known issues in this update
Windows Server Update Services (WSUS) does not display error details
After installing KB5070884 or later updates, Windows Server Update Services (WSUS) does not display synchronization error details within its error reporting. This functionality is temporarily removed to address the Remote Code Execution Vulnerability, CVE-2025-59287.
How to get this update
Before you install this update
For Windows Update: You must have the Windows update released on or after July 8, 2025 (such as KB5062572) installed before installing this update.
For Windows Server Update Services (WSUS) deployment or when installing the standalone package from Microsoft Update Catalog: You must have the Windows update released on or after July 8, 2025 (such as KB5062572) installed before installing this update.
For offline OS image servicing: Make sure that your image includes a Windows update released on or after September 12, 2023 (such as KB5030216). If not, install it on your offline media before you install the latest update. This update installs SSU version 20348.1960. That is the minimum SSU version you must have to prevent error 0x800f0823 (CBS_E_NEW_SERVICING_STACK_REQUIRED).
Servicing Stack Update (SSU): You must have the latest SSU installed to install this update.
Deployment
If you deploy dynamic updates such as this update to an existing Windows image, ensure the boot.stl file is included as part of the installation media. Failure to include the file might prevent devices from successfully starting from the installation media and can result in error code 0xc0430001.
Note
The boot.stl file is used during Secure Boot validation and must match the Windows version and architecture of the image you are updating.
To ensure the boot.stl file is included as part of the installation media, do one of the following:
- Use the Update WinPE script to update an existing Windows image. (Recommended)
- Manually copy the boot.stl file from the device Windows\Boot\EFI folder to the corresponding folder on your installation media before deploying the update.
For information about how to apply Dynamic Update packages to existing Windows images, see Update Windows installation media with Dynamic Update.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
| Available | Next Step |
|---|---|
|
This update is available from the Microsoft Update Catalog. |
File Information
A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel.
Note The English (United States) version of this software update might contain files for additional languages.
Download the file information for out-of-band update KB5136487.
Download the file information for SSU (KB5131089) - version 20348.5859.
Change log
| Change date | Change description |
|---|---|
| November 13, 2026 | This is the original publish date of this update |