MC1486397 Medium Major change
An updated version of the September 2026 Scan Cab is available
Summary AI-generated
An updated September 2026 Scan Cab is available for Exchange Server; it includes metadata for new updates and addresses CVE-2026-96940. Admins must re-deploy if they downloaded before 6:30 PM PDT on Oct 2, 2026.
Suggested actions AI-generated
- Re-acquire and re-deploy updated Scan Cab
- Review documentation for update deployment tools
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1179337 An updated version of the October 2025 Scan Cab is available
- MC1180840 An updated version of the October 2025 Scan Cab is available
- MC1223281 An updated version of the January 2026 Scan Cab is available
- MC1469525 (Updated) The September 2026 Scan Cab is available
- MC1471885 An updated version of the September 2026 Scan Cab is available
- MC1287681 An updated version of the April 2026 Scan Cab is available
Original post from Microsoft
IMPORTANT: This notice is only relevant for environments where:
- Exchange Server Subscription Edition (SE) is used
- Scan Cab is used to check for update compliance
- The September 2026 Scan Cab was deployed before 6:30 PM PDT on October 2, 2026.
What and why:
An updated version of the September 2026 Scan Cab was made available at 6:30 PM PDT on October 2, 2026. This Scan Cab includes new metadata corresponding to new updates for Exchange Server.
The new Microsoft update for Exchange Server released October 2, 2026, included additional protections to address CVE-2026-96940: Exchange Server Elevation of Privilege Vulnerability. See the additional information section of this message for details.
Rollout schedule:
The updated September 2026 Scan Cab was made available at 6:30 PM PDT on October 2, 2026.
Who is affected:
IT administrators who downloaded the Scan Cab before 6:30 PM PDT on October 2, 2026, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments where Exchange Server is used.
No action is required on environments where Scan Cab is not employed and do not have Exchange Server. However, please note that there might be non-Microsoft applications that utilize Scan Cab. Review the documentation for any software and update deployment tools that might be in use for your organization, to understand if this is applicable in your environment.
What will happen:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information:
- Updated Scan Cab: Download the new Scan Cab here
- CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability
- Exchange Team Blog: September 2026 V2 Exchange Server Security Updates
- KB5129955: Security update for Microsoft Exchange Server Subscription Edition
- Announcing a smaller WSUS Scan Cab - Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
- Using WUA to Scan for Updates Offline - Win32 apps: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
- WSUS and the Catalog Site: The Catalog Site used by WSUS to import updates and drivers