# GitHub in September 2026: incidents, uptime and changes

> GitHub in September 2026: 14 incidents on its status page (4 major or critical), 97.97% free of major or critical incidents (vendor-reported), 6 CVEs. From Rewindex’s archive of GitHub’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/github/2026/09
Last updated: 2026-10-02T18:46:47Z

- Incidents posted: 14 (major/critical: 4) · Maintenance: 0
- By vendor impact label: critical 2, major 2, minor 10
- Uptime (vendor-reported): 97.97% free of major/critical incidents, 93.56% free of any incident; outage time 14 h 36 min, incident time 46 h 19 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 6
- Previous month: [August 2026](https://rewindex.com/company/github/2026/08.md) · Next: [October 2026](https://rewindex.com/company/github/2026/10.md) · [All months](https://rewindex.com/company/github/reports.md) · [GitHub](https://rewindex.com/company/github.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Incident with several GitHub Services](https://rewindex.com/company/github/incidents/0rn90wk115q9.md) | critical | 2026-09-13 09:16 UTC | 2026-09-13 10:44 UTC | 1.5 h | resolved |
| [Copilot Code Review is unable to complete reviews](https://rewindex.com/company/github/incidents/169pg72gg9jr.md) | critical | 2026-09-28 21:16 UTC | 2026-09-28 22:08 UTC | 52 min | resolved |
| [Disruption with Copilot Code Review](https://rewindex.com/company/github/incidents/zw1hbx2yyhvr.md) | major | 2026-09-04 20:39 UTC | 2026-09-04 22:26 UTC | 1.8 h | resolved |
| [Degradation with Gemini 3.8 Flash](https://rewindex.com/company/github/incidents/nlxnbqnkdzdl.md) | major | 2026-09-16 07:20 UTC | 2026-09-16 17:48 UTC | 10 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Delays in commit processing](https://rewindex.com/company/github/incidents/jk2dy5h9yp3m.md) | minor | 2026-09-01 15:00 UTC | 2026-09-01 16:01 UTC | 1.0 h | resolved |
| [Incident with Grok Copilot AI Model Provider](https://rewindex.com/company/github/incidents/ktdr5t0xwnhp.md) | minor | 2026-09-03 14:17 UTC | 2026-09-03 17:11 UTC | 2.9 h | resolved |
| [Disruption with Copilot Code Review](https://rewindex.com/company/github/incidents/zw1hbx2yyhvr.md) | major | 2026-09-04 20:39 UTC | 2026-09-04 22:26 UTC | 1.8 h | resolved |
| [Degradation in repos contents API](https://rewindex.com/company/github/incidents/r05vk75c594j.md) | minor | 2026-09-04 22:02 UTC | 2026-09-04 22:23 UTC | 21 min | resolved |
| [Incident with several GitHub Services](https://rewindex.com/company/github/incidents/0rn90wk115q9.md) | critical | 2026-09-13 09:16 UTC | 2026-09-13 10:44 UTC | 1.5 h | resolved |
| [Actions Larger Runner Jobs for some customers may be slow to start](https://rewindex.com/company/github/incidents/kzh5j0mt7qwc.md) | minor | 2026-09-14 18:40 UTC | 2026-09-14 19:35 UTC | 55 min | resolved |
| [Disruption with some GitHub services](https://rewindex.com/company/github/incidents/qwdwmtqghpk5.md) | minor | 2026-09-15 09:47 UTC | 2026-09-15 11:17 UTC | 1.5 h | resolved |
| [Disruption with some GitHub services](https://rewindex.com/company/github/incidents/bk7zgdcq7s9t.md) | minor | 2026-09-15 19:11 UTC | 2026-09-15 20:00 UTC | 49 min | resolved |
| [Degradation with Gemini 3.8 Flash](https://rewindex.com/company/github/incidents/nlxnbqnkdzdl.md) | major | 2026-09-16 07:20 UTC | 2026-09-16 17:48 UTC | 10 h | resolved |
| [Elevated rate of errors for OpenAI models provided by Copilot](https://rewindex.com/company/github/incidents/nvy2q96mcmyg.md) | minor | 2026-09-17 20:59 UTC | 2026-09-17 21:49 UTC | 50 min | resolved |
| [Incident with Pull Requests](https://rewindex.com/company/github/incidents/f6yrxnz5f7bs.md) | minor | 2026-09-20 22:13 UTC | 2026-09-20 23:22 UTC | 1.1 h | resolved |
| [Incident across several services](https://rewindex.com/company/github/incidents/8zc63m64hy36.md) | minor | 2026-09-23 10:11 UTC | 2026-09-24 04:55 UTC | 19 h | resolved |
| [Disruption with billing information updates](https://rewindex.com/company/github/incidents/1dk955gg3bvz.md) | minor | 2026-09-24 16:51 UTC | 2026-09-24 20:41 UTC | 3.8 h | resolved |
| [Copilot Code Review is unable to complete reviews](https://rewindex.com/company/github/incidents/169pg72gg9jr.md) | critical | 2026-09-28 21:16 UTC | 2026-09-28 22:08 UTC | 52 min | resolved |

## CVEs published

- [CVE-2026-18730](https://rewindex.com/cve/CVE-2026-18730.md) Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token (CVSS 7.4), published 2026-09-01
- [CVE-2026-19118](https://rewindex.com/cve/CVE-2026-19118.md) Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution (CVSS 7.5), published 2026-09-01
- [CVE-2026-76851](https://rewindex.com/cve/CVE-2026-76851.md) Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services (CVSS 8.8), published 2026-09-01
- [CVE-2026-77987](https://rewindex.com/cve/CVE-2026-77987.md) GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery (CVSS 9.8), published 2026-09-22
- [CVE-2026-77912](https://rewindex.com/cve/CVE-2026-77912.md) Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline (CVSS 5.4), published 2026-09-22
- [CVE-2026-75101](https://rewindex.com/cve/CVE-2026-75101.md) Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision (CVSS 6.5), published 2026-09-22

## Cite this

GitHub posted 14 status incidents in September 2026 (4 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/github/2026/09
- Citation: GitHub, “GitHub in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/github/2026/09 (CC BY 4.0).
- Markdown link: `[GitHub: GitHub in September 2026 (2026-09-01)](https://rewindex.com/company/github/2026/09)`


---
Canonical: https://rewindex.com/company/github/2026/09 · Markdown: https://rewindex.com/company/github/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T12:51:02.601Z