CVE-2026

Api.Msrc.Microsoft • January 13, 2026

Share: View original

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool On January 7, 2026, a patch was released for CVE-2026-21858, a maximum severity vulnerability affecting n8n, a workflow automation application. This vulnerability could potentially allow unauthorized access and manipulation of workflows within the application, posing significant risks to users relying on n8n for automation tasks. 56 sources 47

Extracted Entities

Platforms (1)

Microsoft Office SharePoint