CompaniesHashiCorpMonthly reportsAugust 2026
HashiCorp in August 2026: incidents, uptime and changes
Vendor-reported outage time 4 h 20 min, incident time 4.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 2 · Minor 4 · No impact listed 1
Major and critical incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Infragraph Service and UI down | Critical | 27 min | resolved | 08-05 | |
| HCP Terraform UI Not Loading | Major | 1.9 h | resolved | 08-05 | |
| Infragraph Snapshot are stuck | Major | 2.0 h | resolved | 08-05 |
Other incidents 5
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| HCP Terraform is unable to communicate with VCS endpoints using certain IP addresses. | Minor | 25 h | resolved | 08-05 | |
| DR Cluster Creation Failures | No impact listed | 2.7 h | resolved | 08-06 | |
| Issues When Downloading Terraform Providers | Minor | 1.8 h | resolved | 08-12 | |
| Terraform AWS Provider v6.59.0 — errors during plan for aws_network_acl_rule resources | Minor | 1.3 h | resolved | 08-13 | |
| Delayed HCP Terraform Runs | Minor | 3 d | resolved | 08-15 |
CVEs published
- CVE-2026-19016 Authorization bypass for session deletion in the transaction API (CVSS 4.2)
- CVE-2026-19012 Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path (CVSS 5.3)
- CVE-2026-19014 Uncontrolled resource consumption in the Consul Connect authorization endpoint (CVSS 4.3)
- CVE-2026-19015 Uncontrolled resource consumption in the Consul Connect CA roots endpoint (CVSS 5.3)
- CVE-2026-19017 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider (CVSS 6.8)
- CVE-2026-15970 L7 intention authorization bypass via custom public listener (CVSS 4.2)
- CVE-2026-15972 Unauthenticated denial of service via unbounded external gRPC connection acceptance (CVSS 7.5)
- CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing (CVSS 5.3)
- CVE-2026-12624 Vault vulnerable to LIST authorization bypass via trailing-slash strip (CVSS 4.3)
- CVE-2026-14886 Vault Enterprise vulnerable to cross-namespace entity deletion (CVSS 8.2)
- CVE-2026-8715 Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath (CVSS 9.6)
- CVE-2026-19589 Packer vulnerable to arbitrary file write via crafted plugin archive during installation (CVSS 7.1)
- CVE-2026-14978 Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions (CVSS 5.5)
- CVE-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths (CVSS 6.8)
Maintenance 1
Show scheduled maintenance
Cite this
HashiCorp posted 8 status incidents in August 2026 (3 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- HashiCorp in August 2026
- Vendor
- HashiCorp
- Date
- URL
- https://rewindex.com/company/hashicorp/2026/08