# HashiCorp in September 2026: incidents, uptime and changes

> HashiCorp in September 2026: 5 incidents on its status page (3 major or critical), 98.60% free of major or critical incidents (vendor-reported), 6 CVEs. From Rewindex’s archive of HashiCorp’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hashicorp/2026/09
Last updated: 2026-10-02T14:12:33Z

- Incidents posted: 5 (major/critical: 3) · Maintenance: 0
- By vendor impact label: critical 1, major 2, minor 2
- Uptime (vendor-reported): 98.60% free of major/critical incidents, 97.41% free of any incident; outage time 10 h 3 min, incident time 18 h 38 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 6
- Previous month: [August 2026](https://rewindex.com/company/hashicorp/2026/08.md) · Next: [October 2026](https://rewindex.com/company/hashicorp/2026/10.md) · [All months](https://rewindex.com/company/hashicorp/reports.md) · [HashiCorp](https://rewindex.com/company/hashicorp.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [HCP Terraform Returning 404s](https://rewindex.com/company/hashicorp/incidents/01M37NV49VB1CF8B4RKYTQZ0CJ.md) | critical | 2026-09-23 17:43 UTC | 2026-09-23 20:02 UTC | 2.3 h | resolved |
| [Hashicorp Linux packages GPG key rotation](https://rewindex.com/company/hashicorp/incidents/01M25QV97NFJ5AS3NQFCFRC98S.md) | major | 2026-09-10 13:24 UTC | 2026-09-10 20:40 UTC | 7.3 h | resolved |
| [Users unable to access releases.hashicorp.con](https://rewindex.com/company/hashicorp/incidents/01M3DQCPFNPDR4WKAVGBXQZYKJ.md) | major | 2026-09-26 02:35 UTC | 2026-09-26 03:03 UTC | 28 min | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Errors creating new VCS workspaces with Bitbucket cloud provider](https://rewindex.com/company/hashicorp/incidents/01M1PRS06XEYC48D769GDVZ0YW.md) | minor | 2026-09-04 17:51 UTC | 2026-09-04 21:46 UTC | 3.9 h | resolved |
| [Hashicorp Linux packages GPG key rotation](https://rewindex.com/company/hashicorp/incidents/01M25QV97NFJ5AS3NQFCFRC98S.md) | major | 2026-09-10 13:24 UTC | 2026-09-10 20:40 UTC | 7.3 h | resolved |
| [Degraded commit/content scans in HCP Vault Radar](https://rewindex.com/company/hashicorp/incidents/01M2NMXXN41JWNBCYGAP7VJPJE.md) | minor | 2026-09-16 17:41 UTC | 2026-09-16 22:21 UTC | 4.7 h | resolved |
| [HCP Terraform Returning 404s](https://rewindex.com/company/hashicorp/incidents/01M37NV49VB1CF8B4RKYTQZ0CJ.md) | critical | 2026-09-23 17:43 UTC | 2026-09-23 20:02 UTC | 2.3 h | resolved |
| [Users unable to access releases.hashicorp.con](https://rewindex.com/company/hashicorp/incidents/01M3DQCPFNPDR4WKAVGBXQZYKJ.md) | major | 2026-09-26 02:35 UTC | 2026-09-26 03:03 UTC | 28 min | resolved |

## CVEs published

- [CVE-2026-87090](https://rewindex.com/cve/CVE-2026-87090.md) Consul vulnerable to an authorization bypass in the catalog node-write path (CVSS 8.3), published 2026-09-10
- [CVE-2026-87106](https://rewindex.com/cve/CVE-2026-87106.md) Consul vulnerable to a denial of service in the native RPC listener (CVSS 6.5), published 2026-09-10
- [CVE-2026-87107](https://rewindex.com/cve/CVE-2026-87107.md) Consul vulnerable to an authorization bypass in the catalog deregistration path (CVSS 5.4), published 2026-09-10
- [CVE-2026-88021](https://rewindex.com/cve/CVE-2026-88021.md) Consul vulnerable to an authorization bypass in the Connect service mesh (CVSS 7.5), published 2026-09-10
- [CVE-2026-87993](https://rewindex.com/cve/CVE-2026-87993.md) Consul-template vulnerable to an information disclosure issue in error handling (CVSS 7.7), published 2026-09-10
- [CVE-2026-88922](https://rewindex.com/cve/CVE-2026-88922.md) Go-getter vulnerable to a privilege escalation issue in its archive decompression handling (CVSS 6.7), published 2026-09-15

## Cite this

HashiCorp posted 5 status incidents in September 2026 (3 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hashicorp/2026/09
- Citation: HashiCorp, “HashiCorp in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hashicorp/2026/09 (CC BY 4.0).
- Markdown link: `[HashiCorp: HashiCorp in September 2026 (2026-09-01)](https://rewindex.com/company/hashicorp/2026/09)`


---
Canonical: https://rewindex.com/company/hashicorp/2026/09 · Markdown: https://rewindex.com/company/hashicorp/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T14:55:58.901Z