CompaniesHashiCorpMonthly reportsOctober 2026
HashiCorp in October 2026: incidents, uptime and changes
3incidents posted
2labelled major or critical
96.20%free of major/critical
96.20%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 28 h 14 min, incident time 28 h 14 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 2 · No impact listed 1
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Terraform Runs Failing | Major | 22 min | resolved | 10-13 | |
| GitHub and Other VCS workloads experiencing intermittent issues | Major | 28 h | resolved | 10-22 |
Other incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| HCP Vault Azure: Cluster Updates and Creation | No impact listed | 5 d | resolved | 10-04 |
CVEs published
- CVE-2026-105818 Vault PKI ACME Issues Certificate With Unvalidated SANs (CVSS 5.9)
- CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots (CVSS 8.0)
- CVE-2026-105820 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution (CVSS 5.4)
- CVE-2026-89322 Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions (CVSS 7.2)
- CVE-2026-19585 Go-getter vulnerable to a path traversal in S3/GCS directory download handling (CVSS 5.3)
- CVE-2026-105765 Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API (CVSS 7.5)
- CVE-2026-105608 Consul vulnerable to an authorization bypass in service mesh registration (CVSS 8.8)
- CVE-2026-105626 Consul vulnerable to a denial of service in HTTP APIs (CVSS 7.5)
- CVE-2026-115804 Consul vulnerable to an authorization bypass in health check registration (CVSS 6.4)
- CVE-2026-110720 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules (CVSS 9.9)
- CVE-2026-102260 Nomad vulnerable to cross-namespace information disclosure in multiple endpoints (CVSS 4.3)
- CVE-2026-107347 Nomad dispatch payload writes can escape the allocation directory through symlinks (CVSS 8.4)
- CVE-2026-119168 Nomad allocation data migration may allow host directory permission modification via symlink following (CVSS 8.8)
- CVE-2026-13303 Boundary vulnerable to server-side request forgery in Vault credential store (CVSS 8.7)
Cite this
HashiCorp posted 3 status incidents in October 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- HashiCorp in October 2026
- Vendor
- HashiCorp
- Date
- URL
- https://rewindex.com/company/hashicorp/2026/10