March 2026 CU for SharePoint Server 2019 is available for download

Important: If your current farm patch level is September 2025 CU, remove the NT Authority\system account from WSS_WPG and IIS_IUSRS local security groups of the SharePoint machines – otherwise installing the SharePoint fixes will fail.

For more details check this article: Trending Issue: SharePoint fixes fail to install after installation of September 2025 CU

The product group released the March 2026 Cumulative Update for SharePoint Server 2019 product family. SharePoint Server 2019 is patched with a language dependent and a language independent fix.

The KB article for March 2026 CU will be available at the following Location in a couple of hours:

  • KB 5002845 – March 2026 Update for SharePoint Server 2019 (language independent)
    This is also a security update!
  • KB 5002847 – March 2026 Update for SharePoint Server 2019 (language dependent)
    This is also a security update!

The downloads for March 2026 CU are available through the following links:

Important: It is required to install both fixes (language dependent and independent) to fully patch a SharePoint server. This applies also to servers which do not have language packs installed. The reason is that each SharePoint installation includes a language dependent component together with a language independent component. If additional language packs are added later (only) the language dependent fix has to be applied again.

It is irrelevant which language you pick on the drop down in download center. Even the language dependent fixes are all in the same package for all languages.

After installing the fixes you need to run the SharePoint 2019 Products Configuration Wizard on each machine in the farm. If you prefer to run the command line version psconfig.exe ensure to have a look here for the correct options.

Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.

 
SharePoint 2019 March 2026 CU Build Number:

Language independent fix: 16.0.10417.20102
Language dependent fix: 16.0.10417.20102
 

Related Links:

6 Comments


  1. Hi Stefan,
    we are affected by the current issue you documented where upgrading a SharePoint Server Subscription Edition farm from January 2026 CU directly to March 2026 CU results in the “Invalid column name ‘SAFE_NOTIFICATION_DATA’” failure during PSCONFIG.
    We also have several SharePoint 2019 farms in the process of being upgraded to SE.
    Is there any indication that the same issue could appear when patching SharePoint 2019, or is it considered safe to patch those environments to February 2026 CU first and then proceed to March 2026 CU as per the workaround you published?
    Thanks,
    Jason

    Reply

    1. Hi Jason,
      only SPSE is affected.
      Cheers,
      Stefan

      Reply

  2. Hi Stefan,

    CISA has reported a critical SharePoint vulnerability (CVE-2026-20963). As we have already applied the Sharepoint server 2019 March 2026 CU, do we need to take any further action?

    Reply

    1. Hi Balkishan,
      January 2026 CU and any later CU includes the fix for this issue.
      If March 2026 CU has been installed on the affected farm there are no further actions required.
      Cheers,
      Stefan

      Reply

  3. Hi Stefan,

    I have SharePoint On-Premises 2019 (soon going to Subscription Edition), with July 2025 CU.
    Can I install March 2026 CU directly or do I need to install August 2025 CU first (duo to Workflow Manager).

    Regards,
    Mike

    Reply

    1. You can directly go to March 2026 CU. Just ensure to install the latest SPWFM patches as well.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.