# HashiCorp in August 2026: incidents, uptime and changes

> HashiCorp in August 2026: 8 incidents on its status page (3 major or critical), 99.41% free of major or critical incidents (vendor-reported), 14 CVEs. From Rewindex’s archive of HashiCorp’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hashicorp/2026/08
Last updated: 2026-10-23T19:10:00Z

- Incidents posted: 8 (major/critical: 3) · Maintenance: 1
- By vendor impact label: critical 1, major 2, minor 4, none 1
- Uptime (vendor-reported): 99.41% free of major/critical incidents, 86.75% free of any incident; outage time 4 h 20 min, incident time 4.1 days
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 14
- Previous month: [July 2026](https://rewindex.com/company/hashicorp/2026/07.md) · Next: [September 2026](https://rewindex.com/company/hashicorp/2026/09.md) · [All months](https://rewindex.com/company/hashicorp/reports.md) · [HashiCorp](https://rewindex.com/company/hashicorp.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Infragraph Service and UI down](https://rewindex.com/company/hashicorp/incidents/01KZ97P3J2GBW60P0SQ3FR557H.md) | critical | 2026-08-05 15:11 UTC | 2026-08-05 15:39 UTC | 27 min | resolved |
| [HCP Terraform UI Not Loading](https://rewindex.com/company/hashicorp/incidents/01KZ7KT06KN9ZZFGWN3RXFV9WR.md) | major | 2026-08-05 00:05 UTC | 2026-08-05 01:59 UTC | 1.9 h | resolved |
| [Infragraph Snapshot are stuck](https://rewindex.com/company/hashicorp/incidents/01KZ9RQERNZYT0WDPT5BQ0QYGB.md) | major | 2026-08-05 20:09 UTC | 2026-08-05 22:08 UTC | 2.0 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [HCP Terraform UI Not Loading](https://rewindex.com/company/hashicorp/incidents/01KZ7KT06KN9ZZFGWN3RXFV9WR.md) | major | 2026-08-05 00:05 UTC | 2026-08-05 01:59 UTC | 1.9 h | resolved |
| [Infragraph Service and UI down](https://rewindex.com/company/hashicorp/incidents/01KZ97P3J2GBW60P0SQ3FR557H.md) | critical | 2026-08-05 15:11 UTC | 2026-08-05 15:39 UTC | 27 min | resolved |
| [HCP Terraform is unable to communicate with VCS endpoints using certain IP addresses.](https://rewindex.com/company/hashicorp/incidents/01KZ9N6MT7JM1Y4GGHJP14K0TG.md) | minor | 2026-08-05 19:08 UTC | 2026-08-06 20:33 UTC | 25 h | resolved |
| [Infragraph Snapshot are stuck](https://rewindex.com/company/hashicorp/incidents/01KZ9RQERNZYT0WDPT5BQ0QYGB.md) | major | 2026-08-05 20:09 UTC | 2026-08-05 22:08 UTC | 2.0 h | resolved |
| [DR Cluster Creation Failures](https://rewindex.com/company/hashicorp/incidents/01KZB3Q1A2PE4DQMVSMGE53TWV.md) | none | 2026-08-06 08:40 UTC | 2026-08-06 11:23 UTC | 2.7 h | resolved |
| [Issues When Downloading Terraform Providers](https://rewindex.com/company/hashicorp/incidents/01KZVY0YK6JMVA2RR6EX18WHYW.md) | minor | 2026-08-12 21:28 UTC | 2026-08-12 23:14 UTC | 1.8 h | resolved |
| [Terraform AWS Provider v6.59.0 — errors during plan for aws\_network\_acl\_rule resources](https://rewindex.com/company/hashicorp/incidents/01KZY3YWKZEY9QFKPRZQFF5C82.md) | minor | 2026-08-13 17:50 UTC | 2026-08-13 19:06 UTC | 1.3 h | resolved |
| [Delayed HCP Terraform Runs](https://rewindex.com/company/hashicorp/incidents/01M036AM4VGQPG41CC4Q9SN1XK.md) | minor | 2026-08-15 17:08 UTC | 2026-08-18 12:50 UTC | 3 d | resolved |

## CVEs published

- [CVE-2026-19016](https://rewindex.com/cve/CVE-2026-19016.md) Authorization bypass for session deletion in the transaction API (CVSS 4.2), published 2026-08-07
- [CVE-2026-19012](https://rewindex.com/cve/CVE-2026-19012.md) Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path (CVSS 5.3), published 2026-08-07
- [CVE-2026-19014](https://rewindex.com/cve/CVE-2026-19014.md) Uncontrolled resource consumption in the Consul Connect authorization endpoint (CVSS 4.3), published 2026-08-07
- [CVE-2026-19015](https://rewindex.com/cve/CVE-2026-19015.md) Uncontrolled resource consumption in the Consul Connect CA roots endpoint (CVSS 5.3), published 2026-08-07
- [CVE-2026-19017](https://rewindex.com/cve/CVE-2026-19017.md) Consul vulnerable to partial arbitrary file read via Vault Connect CA provider (CVSS 6.8), published 2026-08-07
- [CVE-2026-15970](https://rewindex.com/cve/CVE-2026-15970.md) L7 intention authorization bypass via custom public listener (CVSS 4.2), published 2026-08-07
- [CVE-2026-15972](https://rewindex.com/cve/CVE-2026-15972.md) Unauthenticated denial of service via unbounded external gRPC connection acceptance (CVSS 7.5), published 2026-08-07
- [CVE-2026-19113](https://rewindex.com/cve/CVE-2026-19113.md) Unauthenticated denial of service via unbounded request body processing (CVSS 5.3), published 2026-08-07
- [CVE-2026-12624](https://rewindex.com/cve/CVE-2026-12624.md) Vault vulnerable to LIST authorization bypass via trailing-slash strip (CVSS 4.3), published 2026-08-10
- [CVE-2026-14886](https://rewindex.com/cve/CVE-2026-14886.md) Vault Enterprise vulnerable to cross-namespace entity deletion (CVSS 8.2), published 2026-08-10
- [CVE-2026-8715](https://rewindex.com/cve/CVE-2026-8715.md) Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath (CVSS 9.6), published 2026-08-13
- [CVE-2026-19589](https://rewindex.com/cve/CVE-2026-19589.md) Packer vulnerable to arbitrary file write via crafted plugin archive during installation (CVSS 7.1), published 2026-08-17
- [CVE-2026-14978](https://rewindex.com/cve/CVE-2026-14978.md) Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions (CVSS 5.5), published 2026-08-19
- [CVE-2026-5006](https://rewindex.com/cve/CVE-2026-5006.md) Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths (CVSS 6.8), published 2026-08-24

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Scheduled Maintenance for HCP Boundary](https://rewindex.com/company/hashicorp/incidents/01M09FTBNFR93S1S5TGZMD81F1.md) | maintenance | 2026-08-28 03:30 UTC | not resolved | ongoing | maintenance complete |

## Cite this

HashiCorp posted 8 status incidents in August 2026 (3 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hashicorp/2026/08
- Citation: HashiCorp, “HashiCorp in August 2026” (2026-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hashicorp/2026/08 (CC BY 4.0).
- Markdown link: `[HashiCorp: HashiCorp in August 2026 (2026-08-01)](https://rewindex.com/company/hashicorp/2026/08)`


---
Canonical: https://rewindex.com/company/hashicorp/2026/08 · Markdown: https://rewindex.com/company/hashicorp/2026/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T14:41:00.274Z