CVE-2026

Api.Msrc.Microsoft • January 13, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool On January 7, 2026, a patch was released for CVE-2026-21858, a maximum severity vulnerability affecting n8n, a workflow automation application. This vulnerability could potentially allow unauthorized access and manipulation of workflows within the application, posing significant risks to users relying on n8n for automation tasks. 56 sources 47

CVE-2026

The full story

Extracted Entities

Attack Types (1)

Platforms (1)