CIS Benchmarks October 2026 Update

CIS Benchmarks

CIS-Benchmarks

The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog detailing all modifications and enhancements.

CIS Benchmarks Updated Last Month

CIS VMware ESXi 7.0 Benchmark v1.6.0

We are pleased to announce the release of the updated CIS VMware ESXi 7.0 Benchmark v1.6.0.

Major modifications to this Benchmark include:

  • 17 additions and updates to recommendations
  • 15 remediation additions and updates
  • More than 15 updated references and links

Thank you to the community for all the tickets, recommendations, suggestions, and participation. This Benchmark cannot evolve and improve without your support. Special thanks to Tony Wilwerding for his contributions.

Download the CIS VMware ESXi 7.0 Benchmark v1.6.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS VMware ESXi 8 Benchmark v1.4.0

We are pleased to announce the release of the updated CIS VMware ESXi 8 Benchmark v1.4.0.

Major modifications to this Benchmark include:

  • 57 audit additions and updates
  • 60 remediation additions and updates
  • More than 50 updated references and links

Thank you to the community for all the tickets, recommendations, suggestions, and participation. This Benchmark cannot evolve and improve without your support. Special thanks to Tony Wilwerding for his contributions.

Download the CIS VMware ESXi 8 Benchmark v1.4.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS MongoDB 8 Benchmark v2.0.0

We are pleased to announce the release of the updated CIS MongoDB 8 Benchmark v2.0.0. This Benchmark has been updated to support MongoDB 8.2.12.

Highlights of this release include:

  • Support for MongoDB 8.2.12
  • Eight updated recommendations
  • Updated references and links

Thank you to the community for helping improve this Benchmark. Special thanks to Matt Reagan for his contributions.

Download the CIS MongoDB 8 Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS MongoDB 7 Benchmark v2.0.0

We are pleased to announce the release of the updated CIS MongoDB 7 Benchmark v2.0.0. This Benchmark has been updated to support MongoDB 7.0.40.

Highlights of this release include:

  • Support for MongoDB 7.0.40
  • Six updated recommendations
  • Updated references and links

Thank you to the community for helping improve this Benchmark. Special thanks to Matt Reagan for his contributions.

Download the CIS MongoDB 7 Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Apache HTTP Server 2.4 Benchmark v2.4.0

We are pleased to announce the release of the updated CIS Apache HTTP Server 2.4 Benchmark v2.4.0. This release includes support for Apache HTTP Server 2.4.68.

Key enhancements include:

  • 13 updated recommendations
  • Support for all Apache HTTP Server 2.4.x versions, including 2.4.68
  • Improved automation support for Ubuntu and Red Hat Linux

Thank you to the community for all of its support and contributions. Special thanks to Tony Wilwerding for helping advance this Benchmark.

Download the CIS Apache HTTP Server 2.4 Benchmark v2.4.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows 10 Enterprise Benchmark v5.0.0

We are excited to announce the publication of the updated CIS Microsoft Windows 10 Enterprise Benchmark v5.0.0.

Summary of changes in this latest version:

  • 2 recommendations added
  • 17 recommendations updated
  • 18 recommendations removed
  • 1 recommendation renamed
  • 18 CIS Controls mappings updated
  • All Microsoft Defender Antivirus recommendations removed, as Microsoft Defender now has its own Benchmark

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows 10 Enterprise Benchmark v5.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS YugabyteDB Benchmark v2.0.0

We are pleased to announce the publication of the updated CIS YugabyteDB Benchmark v2.0.0.

A detailed changelog is available in the DOCX and PDF versions of the Benchmark.

Thank you to the Yugabyte community for helping update this Benchmark.

Download the CIS YugabyteDB Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Talos Linux Benchmark v2.0.0

We are pleased to announce the publication of the updated CIS Talos Linux Benchmark v2.0.0.

A detailed changelog is available in the DOCX and PDF versions of the Benchmark.

Thank you to the Talos community for helping update this Benchmark.

Download the CIS Talos Linux Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.


New CIS Benchmarks Released Last Month

CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0.

Much work went into analyzing and expanding this Benchmark. Special thanks to the Linux community and the Nix team; this Benchmark would not have been possible without their contributions.

Download the CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0.

Thank you to everyone who helped develop and review this new Benchmark.

Download the CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS MCP Server Benchmark v1.0.0

We are pleased to announce the release of the new CIS MCP Server Benchmark v1.0.0.

As artificial intelligence adoption accelerates, Model Context Protocol (MCP) is emerging as a key framework for enabling secure communication between AI models, tools, and data sources. The new CIS MCP Server Benchmark provides security best practices to help organizations strengthen the deployment and operation of MCP servers.

Special thanks toTal Skverer and Tomer Schwartz for helping develop this Benchmark.

Download the CIS MCP Server Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.


CIS Build Kits Released Last Month

  • CIS Microsoft Windows 11 STIG Benchmark v1.2.0
  • CIS Microsoft Windows 10 Enterprise Benchmark v5.0.0
  • CIS Google Chrome Group Policy Benchmark v1.1.0
 

Get Involved: Need Volunteers

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:

Interested in the CIS Benchmark development process, how you can contribute, or how to get involved? Reach out to [email protected]. You can also learn more on the CIS Benchmarks Community page.

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.