# Google Cloud in October 2026: incidents, uptime and changes

> Google Cloud in October 2026: 2 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 1 pricing/legal/trust page change, 3 deprecations, 10 CVEs. From Rewindex’s archive of Google Cloud’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/google-cloud/2026/10
Last updated: 2026-11-02T22:17:23Z

- Incidents posted: 2 (major/critical: 0) · Maintenance: 0
- By vendor impact label: minor 2
- Uptime (vendor-reported): 100% free of major/critical incidents, 95.17% free of any incident; outage time 0 min, incident time 35 h 54 min
- Price changes: 0 · Pricing/legal/trust page changes: 1 · Deprecations: 3 · CVEs: 10
- Previous month: [September 2026](https://rewindex.com/company/google-cloud/2026/09.md) · Next: none · [All months](https://rewindex.com/company/google-cloud/reports.md) · [Google Cloud](https://rewindex.com/company/google-cloud.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Google Cloud Storage (GCS) customers experienced elevated latencies and error rates when performing upload or write operations.](https://rewindex.com/company/google-cloud/incidents/msfvt6pip557bjryysut.md) | minor | 2026-10-08 11:00 UTC | 2026-10-09 16:46 UTC | 30 h | resolved |
| [Multiple services were experiencing issues in the europe-west2 region.](https://rewindex.com/company/google-cloud/incidents/xs2xthzavc9ynafnpyzj.md) | minor | 2026-10-20 06:00 UTC | 2026-10-20 12:08 UTC | 6.1 h | resolved |

## Pricing, legal and trust page changes

- 2026-10-22 08:43 UTC: [Terms (legal) page changed](https://rewindex.com/change/p5263.md) (Terms of service: Terms (legal) page)

## Deprecations and commercial changes

- [gcloud-man-pages component](https://deadcanary.io/event/google-cloud-gcloud-man-pages-component-8fa7/) (gcloud-man-pages component): announced 2026-10-20, effective 2026-10-20
- [ListCaseEvents API endpoint](https://deadcanary.io/event/google-cloud-listcaseevents-api-endpoint-b693/) (ListCaseEvents API endpoint): announced 2026-10-18, effective 2026-10-12
- [Application Integration IAM and run-as service account checks](https://deadcanary.io/event/google-cloud-application-integration-iam-and-run-as-service-account-ch-f9e9/) (Application Integration IAM and run-as service account checks): announced 2026-10-12, effective 2026-10-15

## CVEs published

- [CVE-2026-85298](https://rewindex.com/cve/CVE-2026-85298.md) Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation (CVSS 7.3), published 2026-10-14
- [CVE-2026-85267](https://rewindex.com/cve/CVE-2026-85267.md) Cross-Site WebSocket Hijacking in Google Cloud Shell (CVSS 8.7), published 2026-10-20
- [CVE-2026-111943](https://rewindex.com/cve/CVE-2026-111943.md) Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8), published 2026-10-21
- [CVE-2026-109618](https://rewindex.com/cve/CVE-2026-109618.md) RCE via OOM corruption (CVSS 9.8, CISA KEV), published 2026-10-21
- [CVE-2026-109619](https://rewindex.com/cve/CVE-2026-109619.md) RCE via stale global state (CVSS 8.1, CISA KEV), published 2026-10-21
- [CVE-2026-93328](https://rewindex.com/cve/CVE-2026-93328.md) Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write (CVSS 9.3), published 2026-10-26
- [CVE-2026-85297](https://rewindex.com/cve/CVE-2026-85297.md) Bucket Squatting in Cloud Run MCP leads to Service Account Takeover (CVSS 7.7), published 2026-10-26
- [CVE-2026-85299](https://rewindex.com/cve/CVE-2026-85299.md) Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration (CVSS 8.3), published 2026-10-27
- [CVE-2026-85268](https://rewindex.com/cve/CVE-2026-85268.md) Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID (CVSS 8.7), published 2026-10-30
- [CVE-2026-93327](https://rewindex.com/cve/CVE-2026-93327.md) Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution (CVSS 9.4), published 2026-10-30

## Cite this

Google Cloud posted 2 status incidents in October 2026 (0 major or critical); 0 price changes and 1 notable page change observed.

- Canonical URL: https://rewindex.com/company/google-cloud/2026/10
- Citation: Google Cloud, “Google Cloud in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/google-cloud/2026/10 (CC BY 4.0).
- Markdown link: `[Google Cloud: Google Cloud in October 2026 (2026-10-01)](https://rewindex.com/company/google-cloud/2026/10)`


---
Canonical: https://rewindex.com/company/google-cloud/2026/10 · Markdown: https://rewindex.com/company/google-cloud/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:56:48.242Z