January 2026 CU for SharePoint Server 2019 is available for download

Important: If your current farm patch level is September 2025 CU, remove the NT Authority\system account from WSS_WPG and IIS_IUSRS local security groups of the SharePoint machines – otherwise installing the SharePoint fixes will fail.

For more details check this article: Trending Issue: SharePoint fixes fail to install after installation of September 2025 CU

The product group released the January 2026 Cumulative Update for SharePoint Server 2019 product family. SharePoint Server 2019 is patched with a language dependent and a language independent fix.

The KB article for January 2026 CU will be available at the following Location in a couple of hours:

  • KB 5002825 – January 2026 Update for SharePoint Server 2019 (language independent)
    This is also a security update!
  • KB 5002823 – January 2026 Update for SharePoint Server 2019 (language dependent)
    This is also a security update!

The downloads for January 2026 CU are available through the following links:

Important: It is required to install both fixes (language dependent and independent) to fully patch a SharePoint server. This applies also to servers which do not have language packs installed. The reason is that each SharePoint installation includes a language dependent component together with a language independent component. If additional language packs are added later (only) the language dependent fix has to be applied again.

It is irrelevant which language you pick on the drop down in download center. Even the language dependent fixes are all in the same package for all languages.

After installing the fixes you need to run the SharePoint 2019 Products Configuration Wizard on each machine in the farm. If you prefer to run the command line version psconfig.exe ensure to have a look here for the correct options.

Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.

 
SharePoint 2019 January 2026 CU Build Number:

Language independent fix: 16.0.10417.20083
Language dependent fix: 16.0.10417.20083
 

Related Links:

8 Comments


  1. Subject: SharePoint 2019 January Security Updates – Risk & Workflow Manager Issues

    Hi Stefan,
    We have January security updates available for SharePoint 2019. Before proceeding, I wanted to highlight the current risk and status, based on our recent patching experience.
    As part of the November 2019 updates, we encountered an issue where our classic Workflow Manager (WFM) setup broke post‑patching. Since then, we have been actively working to restore the workflows but are still facing blocking issues.
    We have followed all remediation steps and guidance published by Microsoft, including:

    Official Microsoft documentation:
    https://learn.microsoft.com/en-us/sharepoint/governance/update-to-spworkflow-manager-when-upgrading-farms

    Community guidance on upgrading SharePoint and Workflow Manager together:
    https://joshroark.com/upgrading-sharepoint-and-wfm-at-the-same-time/

    Despite following the documented steps, we are encountering failures at multiple points. The two major issues observed are:

    Reconfiguring Workflow Manager on the original server

    The configuration fails with an error asking to remove the Workflow Manager folder, even though the folder does not exist on the server.

    Configuring Workflow Manager on a different server in the farm

    The setup fails with SQL connection errors, and
    We are unable to reuse the old server certificates, since the certificate key was reset earlier, blocking the configuration process.

    Due to these unresolved issues, classic workflows remain impacted, and we are still working toward a stable remediation.
    given this situation, shall we move forward with Jan patch does it affect the classic workflow manager?

    Thanks,
    Prashant

    Reply

    1. Hello,

      The error indicating the presence of the “workflow manager” directory is due to a registry key that must be deleted.
      After that, installation can proceed.
      In addition, it is necessary to migrate to the SharePoint workflow manager.

      Reply

      1. Thanks for the update. We followed the registry key deletion workflow and ensured that no related entries were left behind. However, we are still encountering the same error.
        Do we have any other documentation or article that provides a more practical approach for upgrading SPWFM from Classic?

        Reply

  2. Hi Stefan,

    we have installed the Jan 2026 patching to UAT environment on 23 Jan 2026. after install the patch some of the custom webpart unable to open. ‘The type is not registered as safe’ error. checked the SP logs, ‘Error=The type is not registered as safe. at Microsoft.SharePoint.EditingPageParser.VerifyControlOnSafeList(String dscXml, RegisterDirectiveManager registerDirectiveManager, SPWeb web, Boolean blockServerSideIncludes, Boolean blockPropertyTraversal) at Microsoft.SharePoint.WebPartPages.DataFormWebPart.CreateChildControls() at Microsoft.SharePoint.WebPartPages.XsltListViewWebPart.CreateChildControls() at System.Web.UI.Control.EnsureChildControls() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Control.PreRenderRecursiveInternal() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) 37a3f0a1-0846-f0d0-e699-1c63a39b04ef’. These custom webpart we are using very long time, and recently there is no changes on these webpart. please advice on this.
    thank you!

    Reply

      1. Hi Stefan,

        thank you for the update.
        We have troubleshot as per your guide, and identified the affected control related to the issue. On the post page, we are using a Custom Web Part along with a Script Web Part. The Script Web Part includes an XSL file that contains the Like control. The issue appears to be caused by the following line in the XSL:

        We verified the web.config file and confirmed that the control is already registered as a Safe Control.
        We also attempted to update the assembly version and PublicKeyToken, however, the issue still persists.
        When we comment out the PS:LikeControl line in the XSL file, the page loads successfully, but the Like functionality is no longer available.
        Could you please advise on this issue and suggest how we can resolve it while retaining the Like functionality?

        Thank you!

        Reply

        1. Hi Priya,
          we have meanwhile identified the issue as a problem in January 2026 CU.
          Please open a ticket to get informed when a fix has been made available.
          Cheers,
          Stefan

          Reply

          1. Hi Stefan,

            Noted, thank you for the update!

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.