CompaniesHashiCorpMonthly reportsSeptember 2026
HashiCorp in September 2026: incidents, uptime and changes
5incidents posted
3labelled major or critical
98.60%free of major/critical
97.41%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 10 h 3 min, incident time 18 h 38 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 2 · Minor 2
Major and critical incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| HCP Terraform Returning 404s | Critical | 2.3 h | resolved | 09-23 | |
| Hashicorp Linux packages GPG key rotation | Major | 7.3 h | resolved | 09-10 | |
| Users unable to access releases.hashicorp.con | Major | 28 min | resolved | 09-26 |
Other incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Errors creating new VCS workspaces with Bitbucket cloud provider | Minor | 3.9 h | resolved | 09-04 | |
| Degraded commit/content scans in HCP Vault Radar | Minor | 4.7 h | resolved | 09-16 |
CVEs published
- CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path (CVSS 8.3)
- CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener (CVSS 6.5)
- CVE-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path (CVSS 5.4)
- CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh (CVSS 7.5)
- CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling (CVSS 7.7)
- CVE-2026-88922 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling (CVSS 6.7)
Cite this
HashiCorp posted 5 status incidents in September 2026 (3 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- HashiCorp in September 2026
- Vendor
- HashiCorp
- Date
- URL
- https://rewindex.com/company/hashicorp/2026/09