Windows 11 Always On VPN fails to connect after the September 2026 update. Switch to a fixed IKEv2 or SSTP protocol until Microsoft ships a permanent fix.
IKEv2
Palo Alto Networks patches CVE-2026-0263 and CVE-2026-0265. Fixes for IKEv2 RCE and CAS bypass are now available. Update your PAN-OS firewalls immediately!
WatchGuard warns of an active CVSS 9.3 zero-day (CVE-2025-14733). Attackers are exploiting IKEv2 VPNs for root RCE. Patch and rotate secrets now!
WatchGuard patched five flaws in Fireware OS. CVE-2025-11838 (CVSS 8.7) allows unauthenticated VPN DoS, while CLI Command Injection risks RCE in the management interface. Update immediately to v2025.1.3.
Microsoft is enhancing VPN security in Windows Server. Learn about the deprecation of PPTP and L2TP protocols and the recommended alternatives.