Updates for SharePoint Server Subscription Edition (January 2026 CU)

18 January 2026    |    Comments   Comments: 0

A new cumulative update (January 2026 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.19127.20442

Important before installation:

If you are upgrading from the September 2025 CU to a newer update, remove the NT AUTHORITY\SYSTEM account from the local WSS_WPG and IIS_IUSRS groups on every SharePoint server in the farm before installation, if it is a member. Otherwise, installation of the update may fail.

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002822 – January 2026 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

KB 5002822: Install this CU on the release version of SharePoint Server Subscription Edition. If the farm uses SharePoint Workflow Manager, first install KB5002799.

Classic Workflow Manager requires enabling the following debug flag to remain usable:

$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002822 addresses elevation of privilege in Office Click-To-Run, remote code execution in Word and SharePoint, information disclosure in SharePoint, and spoofing in SharePoint Server. The advisories are: CVE-2026-20943, CVE-2026-20958, CVE-2026-20963, CVE-2026-20951, CVE-2026-20959, CVE-2026-20947.

The unified package KB 5002822 brings these SharePoint Server Subscription Edition changes:

  • Adds the Version 25H2 feature update, which is also included in subsequent public updates.

  • Integrates the ECS .NET Client library with SharePoint Server to support URL blocking.

  • Fixes an issue affecting GB18030-2022 certification.

  • Fixes an issue where the UPA-backed claims provider cannot resolve groups in People Picker when their names contain special characters.

  • Fixes an issue where a DateOnly column shows a time value as well as the date in the modern information panel.

  • Fixes an issue where links have no discernible text, including links represented solely by an image or icon without accessible alternative text.

  • Changes the brightness of the Favorites panel’s star icon to improve its visibility.

  • Fixes an issue where the Drop an image section option has no visible keyboard focus and shows no popup on hover.

  • Fixes an issue where TAB navigation moves focus outside the Image gallery layout property pane.

  • Fixes an issue where TAB navigation moves focus outside the Font color popup in the Text and table formatting pane.

  • Fixes an issue where the Permissions dialog has an accessibility defect.

  • Fixes an issue where keyboard navigation cannot access the info icon.

  • Fixes an issue where migration of Remote Blob Storage (RBS) duplicates data.

Comments are closed.