# Auth0 in October 2026: incidents, uptime and changes

> Auth0 in October 2026: 3 incidents on its status page (3 major or critical), 99.89% free of major or critical incidents (vendor-reported), 2 pricing/legal/trust page changes, 1 deprecation, 4 CVEs. From Rewindex’s archive of Auth0’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/auth0/2026/10
Last updated: 2026-11-01T00:00:00Z

- Incidents posted: 3 (major/critical: 3) · Maintenance: 2
- By vendor impact label: critical 1, major 2
- Uptime (vendor-reported): 99.89% free of major/critical incidents, 99.89% free of any incident; outage time 49 min, incident time 49 min
- Price changes: 0 · Pricing/legal/trust page changes: 2 · Deprecations: 1 · CVEs: 4
- Previous month: [September 2026](https://rewindex.com/company/auth0/2026/09.md) · Next: [November 2026](https://rewindex.com/company/auth0/2026/11.md) · [All months](https://rewindex.com/company/auth0/reports.md) · [Auth0](https://rewindex.com/company/auth0.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Third-Party Outage Impacting US-1 Public Cloud](https://rewindex.com/company/auth0/incidents/8cfjt0lvxkv8.md) | critical | 2026-10-23 17:39 UTC | 2026-10-23 17:45 UTC | 6 min | resolved |
| [Elevated Errors on US-4 Public Cloud](https://rewindex.com/company/auth0/incidents/pzdxt6jr4jgs.md) | major | 2026-10-09 19:01 UTC | 2026-10-09 19:13 UTC | 12 min | resolved |
| [Elevated Errors on Multiple Public Cloud Environments](https://rewindex.com/company/auth0/incidents/srhyzy48m5x8.md) | major | 2026-10-14 05:01 UTC | 2026-10-14 05:32 UTC | 31 min | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Elevated Errors on US-4 Public Cloud](https://rewindex.com/company/auth0/incidents/pzdxt6jr4jgs.md) | major | 2026-10-09 19:01 UTC | 2026-10-09 19:13 UTC | 12 min | resolved |
| [Elevated Errors on Multiple Public Cloud Environments](https://rewindex.com/company/auth0/incidents/srhyzy48m5x8.md) | major | 2026-10-14 05:01 UTC | 2026-10-14 05:32 UTC | 31 min | resolved |
| [Third-Party Outage Impacting US-1 Public Cloud](https://rewindex.com/company/auth0/incidents/8cfjt0lvxkv8.md) | critical | 2026-10-23 17:39 UTC | 2026-10-23 17:45 UTC | 6 min | resolved |

## Pricing, legal and trust page changes

- 2026-10-22 08:44 UTC: [Privacy (legal) page changed](https://rewindex.com/change/p5245.md) (Privacy policy: Privacy (legal) page)
- 2026-10-29 08:45 UTC: [Privacy (legal) page changed](https://rewindex.com/change/p10336.md) (Privacy policy: Privacy (legal) page)

## Deprecations and commercial changes

- [Third-party application creation default security mode](https://deadcanary.io/event/auth0-third-party-application-creation-default-security-mode-20f3/) (Third-party application creation default security mode): announced 2026-04-23, effective 2026-10-23

## CVEs published

- [CVE-2026-107369](https://rewindex.com/cve/CVE-2026-107369.md) Improper Validation of Post-Login Redirect URL in nextjs-auth0 (CVSS 6.1), published 2026-10-13
- [CVE-2026-107370](https://rewindex.com/cve/CVE-2026-107370.md) Improper Request Handling for Active Directory Logins in auth0-lock (CVSS 5.3), published 2026-10-13
- [CVE-2026-107371](https://rewindex.com/cve/CVE-2026-107371.md) Missing Verification of auth\_time Claim in auth0.js (CVSS 5.4), published 2026-10-13
- [CVE-2026-85473](https://rewindex.com/cve/CVE-2026-85473.md) Out-of-Range Timestamp Claim Handling in auth0/java-jwt (CVSS 5.3), published 2026-10-13

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Planned Maintenance](https://rewindex.com/company/auth0/incidents/cg2nj3w6j3xv.md) | maintenance | 2026-10-19 16:31 UTC | 2026-10-27 13:56 UTC | 8 d | resolved |
| [Planned Maintenance](https://rewindex.com/company/auth0/incidents/5r61typdcqc2.md) | maintenance | 2026-10-27 14:09 UTC | not resolved | ongoing | scheduled |

## Cite this

Auth0 posted 3 status incidents in October 2026 (3 major or critical); 0 price changes and 2 notable page changes observed.

- Canonical URL: https://rewindex.com/company/auth0/2026/10
- Citation: Auth0, “Auth0 in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/auth0/2026/10 (CC BY 4.0).
- Markdown link: `[Auth0: Auth0 in October 2026 (2026-10-01)](https://rewindex.com/company/auth0/2026/10)`


---
Canonical: https://rewindex.com/company/auth0/2026/10 · Markdown: https://rewindex.com/company/auth0/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T17:39:00.016Z