SharePoint Server 2016 and 2019 lose security updates
Reviewed by Helen Jones
Microsoft ended security support for SharePoint Server 2016 and 2019 on 14 July 2026. Farms still on those releases no longer receive patches from Microsoft. Only SharePoint Server Subscription Edition remains in active and security support. Its latest cumulative update, build 16.0.20326.20124, shipped on 8 September 2026. SharePoint Online is unaffected. Versions 2013 and earlier were already out of support.
For years many mid-size estates kept 2016 or 2019 running for line-of-business apps, slow migrations, or hybrid file shares while the rest of the company lived in Microsoft 365. Security debt sat behind the firewall and rarely appeared in day-to-day Teams tickets. That buffer is gone. Unpatched on-prem servers now sit next to hybrid identities, external sharing paths, and any Copilot or search surface that can reach them. The pressure is not only to move, but to avoid dumping years of unclear owners, broken inheritance, and stale content straight into Online or Subscription Edition without a cleanup pass.
Analysis
This is a change to act on if any 2016 or 2019 farm still exists in your hybrid footprint, not a reason to freeze Online governance work. Inventory those servers this week, pick Subscription Edition or SharePoint Online as the exit, and require named site owners plus a permissions and external-sharing review before content moves.
Source note
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "SharePoint Server 2016 and 2019 lose security updates", Collab365 Spaces. 2 sources referenced.