Can't update Windows 11 to the 2026-10 Security Update (KB5127648) due to install error 0x80070002.

Uri 0 Reputation points
2026-11-09T05:15:50.0233333+00:00

Current OS Version: Windows 11 Pro, x64, version 26200.9457.

I've already tried to:

  1. Run DISM /Online /Cleanup-Image /RestoreHealth but it completed successfuly.
  2. Run sfc /scannow but it reported no integrity violations.
  3. Run ren C:\Windows\SoftwareDistribution SoftwareDistribution.old and ren C:\Windows\System32\catroot2 catroot2.old
  4. Tried to install the 25H2 repair version when clicking on 'Reinstall Now' in 'Fix problems using Windows Update', but the installation failed due to error 0xc1900204.
Windows for home | Windows 11 | Windows update
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh 183.6K Reputation points Volunteer Moderator
    2026-11-09T05:20:39.1566667+00:00

    Please upload the following log file in your next reply.

    C:\$WINDOWS.~BT\Sources\Panther\setupact.log

    C:\$WINDOWS.~BT is a hidden folder. You can access that file/folder using the Run menu.

    enter image description here

    Also, copy the C:\Windows\Logs\CBS folder, zip the folder and share it on OneDrive.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-11-09T05:16:06.11+00:00

    Since DISM /Online /Cleanup-Image /RestoreHealth completed successfully, sfc /scannow found no integrity violations, and resetting SoftwareDistribution and catroot2 did not help, the next supported path is to install KB5127648 manually from the Microsoft Update Catalog.

    For Windows 11 Pro x64, KB5127648 requires two .msu packages:

    1. Install the required checkpoint cumulative update first:
      • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
    2. Then install the target cumulative update:
      • windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu

    Two supported ways to do this:

    1. Install each MSU individually, in order
      • Download both files.
      • Double-click windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu first.
      • Then double-click windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu.
      • If the checkpoint update is already present, Windows will indicate that it is already installed.
    2. Install both MSU files together with DISM
      • Place only the KB5127648 x64 .msu files in a folder such as C:\Packages.
      • Open Command Prompt as administrator.
      • Run: 
             DISM /Online /Add-Package /PackagePath:c:\packages\windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu
      DISM scans the folder specified in PackagePath and installs any required checkpoint cumulative updates automatically.

    If the install still fails with 0x80070002, the supported troubleshooting in the context is:

    1. Review the CBS logs for missing files or services that failed to start.
    2. Verify whether C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools exists.
      • If it is missing, copy the System Tools folder from a working machine to the affected machine, including all shortcuts.
    3. Check whether C:\Windows\Microsoft.NET\Framework\v4.0.30319 is empty.
      • If it is empty, the documented resolution is to back up and delete these registry keys, then try the update again:
        • HKLM\System\CurrentControlSet\services\clr_optimization_v4.0.30319_32
        • HKLM\System\CurrentControlSet\services\clr_optimization_v4.0.30319_64

    Warning: deleting registry keys is high risk. Back up the registry first before making those changes.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.