Cyberkendra PowerShell Script Signing Issues After November 2026 Update
Article Content
- •Microsoft's update KB5132061 enforces stricter PowerShell script signature validation.
- •Scripts with malformed UTF-8 encoding now fail verification and report as unsigned.
- •No CVE is associated with this change, and no opt-out option is available.
Microsoft's November 10, 2026, Windows update KB5132061 introduced stricter validation for signed PowerShell scripts, causing some previously valid scripts to fail verification. This change affects scripts with malformed UTF-8 encoding, which now report as unsigned. Microsoft confirmed that no CVE is associated with this update, and there is no opt-out option available. Affected systems include Windows 11 versions 23H2 to 26H2, Windows 10 Enterprise LTSC 2021, and Windows Server 2016 to 2025. Administrators are advised to review and re-sign affected scripts, ensuring they are saved as UTF-8 with a byte-order mark. The update has implications for environments enforcing strict script signing, such as scheduled tasks and deployment pipelines, where unsigned scripts will not execute.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Microsoft in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed