Your VPN worked yesterday. Windows installed an update overnight, and now the connection hangs on "Connecting" or fails with an error you have never seen. It is a frustrating and surprisingly common experience, and in autumn 2026 it was not just bad luck: Microsoft itself confirmed a VPN bug introduced by a Windows 11 security update.

This guide explains what happened with that bug, how to work out whether your problem comes from Windows, your VPN app, the server or the network, and a set of safe steps to try before you start changing deeper system settings.

What happened in September and October 2026

According to BleepingComputer, Microsoft's September 2026 security updates for Windows 11 broke Always On VPN, the VPN feature built into Windows that organisations use to keep work laptops connected to their networks. The problem affected Windows 11 version 24H2 and later. It appeared when a VPN profile was set to choose a protocol automatically (trying IKEv2 and SSTP) and the first connection attempt failed.

The symptoms were:

  • the connection stayed stuck on "Connecting" or kept retrying without success;
  • later attempts could show the error "The specified port is already in use".

Microsoft released the KB5127648 and KB5127646 updates on 13 October 2026, as part of the monthly Patch Tuesday, and said they fixed the issue. A week later, on 20 October 2026, The Register reported that Microsoft had admitted the fix did not work. The issue, tracked as WI1482218, had been "mistakenly updated to Resolved status" and was moved back to "Mitigated". Microsoft said it affects Windows 11 versions 24H2 through 26H2 and that a resolution is planned in an update "to be released in the coming weeks".

The workaround Microsoft recommends for administrators is unchanged: switch the Always On VPN profile from automatic protocol selection to a single protocol, either SSTP only or IKEv2 only.

Who is affected? The reports cover Windows' own built-in VPN profiles, mostly used by businesses and schools. They do not say that standalone VPN apps from other developers are affected. If you use a work VPN that is set up through Windows settings, contact your IT department, which can apply the workaround centrally.

First, work out where the problem is

Before changing anything, spend five minutes narrowing it down. Each question rules something in or out:

  1. Does the internet work without the VPN? If websites don't load even when the VPN is off, the problem is your connection or Windows networking, not the VPN.
  2. Did the problem start right after an update? Open Settings > Windows Update > Update history and check what was installed and when.
  3. Does the VPN work on another device or network? Try your phone's hotspot. If the VPN connects there, your home or office network, router or provider may be the cause.
  4. Does another server or protocol work? If one server fails but others connect, the issue is likely that server, not your PC.
  5. Does the VPN app show an error message? Write it down exactly. Searching for the precise wording is far more useful than "VPN not working".

Safe steps to try, in order

These steps are low-risk and fix most problems. Try them one at a time and test after each.

1. Restart properly

Updates often finish only after a full restart. Use Start > Power > Restart rather than shutting the lid, and check whether Windows Update is asking for another restart.

2. Check the date, time and time zone

Secure connections depend on certificates, which are only valid for certain dates. If your clock is wrong, encrypted connections can fail in confusing ways. Go to Settings > Time & language > Date & time, turn on "Set time automatically" and "Set time zone automatically", and select "Sync now".

3. Try another protocol or server

If your VPN app lets you choose a protocol, switch between the automatic setting and a specific one. This mirrors Microsoft's own advice for its built-in VPN: a single, fixed protocol can avoid problems in the fallback logic. Also try a different server location.

4. Update or reinstall the VPN app

Updates sometimes change network components that VPN apps rely on. Install the latest version of your app from the developer's official site. If it still fails, uninstall it, restart, and install it again; this re-creates its virtual network adapter and services.

5. Check your firewall and security software

Third-party antivirus or firewall tools can block a VPN after either of them updates. Check whether the security software shows a blocked connection, and allow the VPN app if needed. Avoid switching protection off for long periods; if you disable it briefly to test, turn it back on straight away.

6. Look at network adapters

Open Settings > Network & internet > Advanced network settings. You should see your VPN app's adapter alongside your Wi-Fi or Ethernet adapter. If it is missing or disabled, reinstalling the VPN app usually restores it. If you have several old VPN apps installed, removing the ones you no longer use can prevent conflicts.

7. Network reset, as a last resort

Windows has a Network reset option under Advanced network settings. It removes and reinstalls all network adapters and restores networking settings to their defaults. It often helps, but afterwards you may need to reconnect to your Wi-Fi network and reinstall or reconfigure VPN software, so have your Wi-Fi password at hand before you start.

What not to do

  • Don't uninstall security updates just to get a VPN working. Rolling back leaves your PC exposed to the vulnerabilities the update fixed; on managed devices, leave that decision to IT.
  • Don't download "VPN fixer" tools or drivers from random websites. Get software only from Microsoft or the VPN developer.
  • Don't disable your firewall permanently. Find the specific rule that blocks the VPN instead.

When to wait for a patch

If your problem matches Microsoft's description (a built-in Windows VPN profile, Windows 11 24H2 or later, stuck on "Connecting" or "port already in use" after the September 2026 updates), the reliable fix is the official workaround now and a future Windows update later. Keep Windows Update on and check Microsoft's release health information for changes to issue WI1482218.

Using VPNRice on Windows

VPNRice for Windows is a desktop app for Windows 10 and 11 on 64-bit (x64) PCs and offers the WireGuard and RiceGuardX protocols. If it stops connecting after an update, the steps above apply: restart, check the clock, try the other protocol or another server, and reinstall from the official download page. Once connected, our What is my IP tool shows whether websites see the VPN server's address.

Key takeaways

  • A Windows 11 update in September 2026 broke built-in Always On VPN connections; as of 20 October 2026 Microsoft says the October fix did not work and a new one is coming.
  • Narrow the problem down first: internet without VPN, another network, another server.
  • Restart, sync the clock, change protocol, reinstall the app and check security software before trying a network reset.
  • Don't roll back security updates or install unofficial "fixers".