Microsoft has distributed KB5127936, a preview cumulative update targeting Windows 11 versions 25H2 and 26H2, delivering 41 modifications and enhancements. The update focuses on improvements to File Explorer and Cloud rebuild functionality, among other refinements.
Preview updates arrive monthly at the end of each cycle, enabling IT administrators and end users to evaluate new capabilities and corrections ahead of their deployment to the broader user base during the following month's Patch Tuesday. Unlike standard Patch Tuesday releases, these preview updates remain optional and exclude security patches.
The October 2026 preview iteration streamlines the File Explorer context menu, offering users greater control over which application extensions and commands display and their arrangement. Following KB5127936 installation, Cloud rebuild gains the ability to reinstall Windows without requiring USB media or proprietary images, instead retrieving necessary components and drivers directly from Windows Update—even when the operating system fails to start.
Microsoft has refreshed XBOX mode with an updated Gaming Task View that provides rapid access to critical system functions including Power Options and Exit to Desktop while gaming, delivered through a new navigation interface.
Installation of KB5127936 is available through the Microsoft Update Catalog or by navigating to Settings, selecting Windows Update, and clicking "Check for Updates." Since this is an optional update, users must select the "Download and install" option unless they have enabled "Get the latest updates as soon as they're available," which triggers automatic installation.
Key improvements in KB5127936
Once applied, this optional non-security update will advance Windows 11 25H2 and 26H2 installations to builds 26200.9818 and 26300.9818, respectively. The October 2026 preview introduces several notable enhancements:
- The Privacy & security page in Windows Settings now groups related Camera, Microphone, and Location privacy controls, with usage information elevated from linked pages to the primary interface.
- Windows recovery (WinRE) can now automatically reuse eligible Wi-Fi profiles already stored in Windows, including networks using certificate-based authentication. Devices can establish connectivity automatically during recovery operations such as quick machine recovery or cloud rebuild without requiring preconfigured Wi-Fi credentials in WinRE. This feature activates by default, though IT administrators can disable it.
- A Restore Summary now displays after restoring a backup profile to a new device, clearly presenting what was recovered, including Windows settings and Microsoft Store applications. This enhancement improves visibility during device transitions and allows users to validate restoration outcomes before continuing setup.
- The adaptive hibernate policy has been refined to enable quicker Modern Standby instant-on resumption while maintaining battery longevity during low-charge scenarios. Changes include reduced hibernation when battery levels exceed 80% and earlier hibernation activation below 10%.
Secure Boot certificate updates
Alongside this month's release, Microsoft notified users that refreshed Secure Boot certificates are deploying to replace the original certificates issued in 2011, which expire in late June 2027. The company initially disclosed intentions to refresh expiring Secure Boot certificates on eligible Windows 11 systems in January, following prior notifications to users and IT administrators in November 2025 to prepare for the transition.
Microsoft has cautioned that customers may require an additional reboot following installation of the October 2026 optional update and subsequent updates rolling out over coming months. "With recent and upcoming Windows updates over the next few months, a limited number of consumer and business devices might experience one additional restart during installation," Microsoft stated in a message center notification. "This one‑time restart occurs after a Secure Boot certificate update is applied as part of the Secure Boot update process."