# Google Cloud in September 2026: incidents, uptime and changes

> Google Cloud in September 2026: 1 incident on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 22 CVEs. From Rewindex’s archive of Google Cloud’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/google-cloud/2026/09
Last updated: 2026-10-06T15:34:36Z

- Incidents posted: 1 (major/critical: 0) · Maintenance: 0
- By vendor impact label: minor 1
- Uptime (vendor-reported): 100% free of major/critical incidents, 99.42% free of any incident; outage time 0 min, incident time 4 h 10 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 22
- Previous month: [August 2026](https://rewindex.com/company/google-cloud/2026/08.md) · Next: [October 2026](https://rewindex.com/company/google-cloud/2026/10.md) · [All months](https://rewindex.com/company/google-cloud/reports.md) · [Google Cloud](https://rewindex.com/company/google-cloud.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Multiple products in us-central1-b are experiencing network service degradation.](https://rewindex.com/company/google-cloud/incidents/j5ia5t9p3g9q5wi7r8ev.md) | minor | 2026-09-01 14:42 UTC | 2026-09-01 18:52 UTC | 4.2 h | resolved |

## CVEs published

- [CVE-2026-79707](https://rewindex.com/cve/CVE-2026-79707.md) Arbitrary File Read in Google Agent Development Kit (ADK) (CVSS 8.7), published 2026-09-04
- [CVE-2026-4644](https://rewindex.com/cve/CVE-2026-4644.md) Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover (CVSS 8.5), published 2026-09-04
- [CVE-2026-79696](https://rewindex.com/cve/CVE-2026-79696.md) Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist (CVSS 10.0), published 2026-09-09
- [CVE-2026-13745](https://rewindex.com/cve/CVE-2026-13745.md) Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI\_CLI\_HOME (CVSS 7.7), published 2026-09-10
- [CVE-2026-19486](https://rewindex.com/cve/CVE-2026-19486.md) SSRF in Gemini Enterprise Agent Platform App Builder (CVSS 8.7), published 2026-09-11
- [CVE-2026-19407](https://rewindex.com/cve/CVE-2026-19407.md) GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK (CVSS 7.7), published 2026-09-15
- [CVE-2026-50572](https://rewindex.com/cve/CVE-2026-50572.md) Envoy: ext\_authz - RawHttpClientImpl onSuccess 0x0 segfault (CVSS 5.9), published 2026-09-21
- [CVE-2026-73548](https://rewindex.com/cve/CVE-2026-73548.md) Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool (CVSS 7.5), published 2026-09-21
- [CVE-2026-73552](https://rewindex.com/cve/CVE-2026-73552.md) Envoy: HTTP RBAC safe\_regex can fail open on RFC-valid obs-text header values (CVSS 7.5), published 2026-09-21
- [CVE-2026-73513](https://rewindex.com/cve/CVE-2026-73513.md) Envoy: oghttp2 upstream trailers incorrect handling (CVSS 7.5), published 2026-09-21
- [CVE-2026-73549](https://rewindex.com/cve/CVE-2026-73549.md) Envoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL\_DST clusters (CVSS 5.3), published 2026-09-21
- [CVE-2026-48521](https://rewindex.com/cve/CVE-2026-48521.md) Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport\_socket\_options is null (CVSS 5.9), published 2026-09-21
- [CVE-2026-73547](https://rewindex.com/cve/CVE-2026-73547.md) Envoy ext\_authz: request \`:path\` pseudoheader dereferenced w/o null check (CVSS 7.5), published 2026-09-21
- [CVE-2026-73550](https://rewindex.com/cve/CVE-2026-73550.md) Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy (CVSS 7.5), published 2026-09-21
- [CVE-2026-73512](https://rewindex.com/cve/CVE-2026-73512.md) Envoy: use-after-free in QUIC on internal redirects (CVSS 7.5), published 2026-09-21
- [CVE-2026-73546](https://rewindex.com/cve/CVE-2026-73546.md) Envoy: Stored XSS in Admin Stats Interface (/stats?format=html) (CVSS 7.4), published 2026-09-21
- [CVE-2026-73551](https://rewindex.com/cve/CVE-2026-73551.md) Envoy: Path normalization does not handle dot and dotdot segments with parameters (CVSS 5.3), published 2026-09-21
- [CVE-2026-73553](https://rewindex.com/cve/CVE-2026-73553.md) Envoy: RBAC Authorization Bypass via Path Parameters (CVSS 7.5), published 2026-09-21
- [CVE-2026-73511](https://rewindex.com/cve/CVE-2026-73511.md) Envoy: Potential path-matching/authentication bypass when using Envoy in combination with a backend stripping per-segment path (matrix) parameters (e.g. Apache Tomcat) (CVSS 5.3), published 2026-09-21
- [CVE-2026-19759](https://rewindex.com/cve/CVE-2026-19759.md) Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution (CVSS 9.4), published 2026-09-28
- [CVE-2026-81867](https://rewindex.com/cve/CVE-2026-81867.md) Deserialization of Untrusted Data in Application Integration allows Remote Code Execution (CVSS 9.4), published 2026-09-28
- [CVE-2026-81375](https://rewindex.com/cve/CVE-2026-81375.md) Confused Deputy in Application Integration allows Internal File Read (CVSS 8.3), published 2026-09-28

## Cite this

Google Cloud posted 1 status incident in September 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/google-cloud/2026/09
- Citation: Google Cloud, “Google Cloud in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/google-cloud/2026/09 (CC BY 4.0).
- Markdown link: `[Google Cloud: Google Cloud in September 2026 (2026-09-01)](https://rewindex.com/company/google-cloud/2026/09)`


---
Canonical: https://rewindex.com/company/google-cloud/2026/09 · Markdown: https://rewindex.com/company/google-cloud/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T14:21:38.412Z