CompaniesGitHubMonthly reportsMay 2026
GitHub in May 2026: incidents, uptime and changes
22incidents posted
10labelled major or critical
97.58%free of major/critical
95.02%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 17 h 56 min, incident time 36 h 59 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 8 · Major 2 · Minor 9 · No impact listed 3
Major and critical incidents 10
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Incident with Issues and Webhooks | Critical | 55 min | resolved | 05-04 | |
| Incident with Actions | Critical | 3.8 h | resolved | 05-05 | |
| Disruption with some GitHub services | Critical | 38 min | resolved | 05-06 | |
| Incident with Pull Requests | Critical | 3.6 h | resolved | 05-06 | |
| CCR and CCA failing to start for PR comments | Critical | 1.9 h | resolved | 05-07 | |
| Actions is experiencing degraded availability | Critical | 35 min | resolved | 05-15 | |
| Incident with Actions and Pages | Critical | 2.4 h | resolved | 05-26 | |
| Disruption with OpenAI Models | Critical | 1.7 h | resolved | 05-28 | |
| Incident with Actions, we are investigating reports of degraded availability | Major | 2.4 h | resolved | 05-06 | |
| Elevated rate of Git push errors | Major | 0 min | resolved | 05-25 |
Other incidents 12
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increased Latency and Failures for SSH Git Operations | Minor | 1.8 h | resolved | 05-05 | |
| Incident with high errors on Git Operations | Minor | 8 min | resolved | 05-11 | |
| Incident with CodeQL, Webhooks, Notifications, and Slack Integration | Minor | 3.1 h | resolved | 05-12 | |
| Incident with CodeQL | Minor | 1.4 h | resolved | 05-13 | |
| [Retroactive] Incident with GitHub.com | No impact listed | 0 min | resolved | 05-15 | |
| Incident with Copilot | No impact listed | 0 min | resolved | 05-19 | |
| Incident with Actions | Minor | 3.3 h | resolved | 05-20 | |
| Intermittent errors with app installation token authentication | Minor | 3.5 h | resolved | 05-23 | |
| Disruption with some GitHub services | Minor | 51 min | resolved | 05-26 | |
| Incident with Pull Requests, Issues, Git Operations and API Requests | Minor | 1.1 h | resolved | 05-27 | |
| Webhook APIs and UI Degraded | Minor | 19 min | resolved | 05-28 | |
| Elevated error rates across multiple services | No impact listed | 0 min | resolved | 05-28 |
CVEs published
- CVE-2026-6736 Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider (CVSS 6.5)
- CVE-2026-7541 Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpoint (CVSS 7.5)
- CVE-2026-8034 Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion (CVSS 9.8)
- CVE-2026-8106 Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential theft (CVSS 6.1)
- CVE-2026-45033 GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor (CVSS 7.8)
- CVE-2026-45803 gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection (CVSS 3.5)
- CVE-2026-8606 Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint (CVSS 5.9)
- CVE-2026-9312 Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint (CVSS 8.2)
- CVE-2026-48501 GitHub CLI tokens leak via `gh attestation` commands (CVSS 7.4)
Cite this
GitHub posted 22 status incidents in May 2026 (10 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitHub in May 2026
- Vendor
- GitHub
- Date
- URL
- https://rewindex.com/company/github/2026/05