LEMON BLOG

If you run SolarWinds Serv-U in your environment, this is one of those updates you don't "schedule for later." SolarWinds just shipped fixes for four critical flaws in Serv-U 15.5 that could lead to remote code execution (RCE) with root-level privileges if attackers manage to exploit them.

If your day involves opening Word files from emails, shared drives, or chat apps, this is the kind of security warning that shouldn't sit around waiting for "when we have time." Security teams are tracking a new Microsoft Word zero-day that's already being exploited in real-world attacks. What makes it especially worrying is that it's not the classic "macro prompt" situation. This flaw can be used in a way that bypasses some of the protections and warning flows users normally rely on before a document does something risky.

If you're seeing "2026-02 Security Update (KB5077181) (26200.7840)" with a restart prompt, that's the February 2026 mandatory cumulative security update for Windows 11 version 25H2 (build 26200.7840). The same update also applies to Windows 11 24H2 (build 26100.7840), but your screenshot is clearly the 25H2 build line.

If you use Google Chrome on Windows, macOS, or Linux, this is one of those updates you don't want to "get around to later." A security advisory from Akati Sekurity highlights two high-severity Chrome vulnerabilities that could expose users to arbitrary code execution (ACE) and denial-of-service (DoS) attacks.

Windows has pushed out a fresh January 2026 update, and if your PC looks like the screenshot, you're already in the middle of it. The update showing up is 2026-01 Update (KB5078127) and it's tied to Build 26200.7628, with the download already underway. For most people, this kind of update is less about shiny new features and more about the practical stuff that keeps Windows stable, secure, and less annoying over time.