CVE-2026

Api.Msrc.Microsoft • January 13, 2026

Share: View original

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool On January 7, 2026, a patch was released for CVE-2026-21858, a maximum severity vulnerability affecting n8n, a workflow automation application. This vulnerability could potentially allow unauthorized access and manipulation of workflows within the application, posing significant risks to users relying on n8n for automation tasks. 56 sources 47

Extracted Entities

Attack Types (1)

Zero-day Exploit

Platforms (1)

Windows Management Services