# HashiCorp in October 2026: incidents, uptime and changes

> HashiCorp in October 2026: 3 incidents on its status page (2 major or critical), 96.20% free of major or critical incidents (vendor-reported), 14 CVEs. From Rewindex’s archive of HashiCorp’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hashicorp/2026/10
Last updated: 2026-11-02T20:17:27Z

- Incidents posted: 3 (major/critical: 2) · Maintenance: 0
- By vendor impact label: major 2, none 1
- Uptime (vendor-reported): 96.20% free of major/critical incidents, 96.20% free of any incident; outage time 28 h 14 min, incident time 28 h 14 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 14
- Previous month: [September 2026](https://rewindex.com/company/hashicorp/2026/09.md) · Next: [November 2026](https://rewindex.com/company/hashicorp/2026/11.md) · [All months](https://rewindex.com/company/hashicorp/reports.md) · [HashiCorp](https://rewindex.com/company/hashicorp.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Terraform Runs Failing](https://rewindex.com/company/hashicorp/incidents/01M4TZZJW6RZJ6BVDRNQKVNS16.md) | major | 2026-10-13 16:01 UTC | 2026-10-13 16:23 UTC | 22 min | resolved |
| [GitHub and Other VCS workloads experiencing intermittent issues](https://rewindex.com/company/hashicorp/incidents/01M5J9S4598B4CW5PZN0P739CD.md) | major | 2026-10-22 17:15 UTC | 2026-10-23 21:07 UTC | 28 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [HCP Vault Azure: Cluster Updates and Creation](https://rewindex.com/company/hashicorp/incidents/01M425HC0FED5GM4SH1DDR55X3.md) | none | 2026-10-04 00:38 UTC | 2026-10-09 06:43 UTC | 5 d | resolved |
| [Terraform Runs Failing](https://rewindex.com/company/hashicorp/incidents/01M4TZZJW6RZJ6BVDRNQKVNS16.md) | major | 2026-10-13 16:01 UTC | 2026-10-13 16:23 UTC | 22 min | resolved |
| [GitHub and Other VCS workloads experiencing intermittent issues](https://rewindex.com/company/hashicorp/incidents/01M5J9S4598B4CW5PZN0P739CD.md) | major | 2026-10-22 17:15 UTC | 2026-10-23 21:07 UTC | 28 h | resolved |

## CVEs published

- [CVE-2026-105818](https://rewindex.com/cve/CVE-2026-105818.md) Vault PKI ACME Issues Certificate With Unvalidated SANs (CVSS 5.9), published 2026-10-07
- [CVE-2026-105816](https://rewindex.com/cve/CVE-2026-105816.md) Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots (CVSS 8.0), published 2026-10-07
- [CVE-2026-105820](https://rewindex.com/cve/CVE-2026-105820.md) Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution (CVSS 5.4), published 2026-10-07
- [CVE-2026-89322](https://rewindex.com/cve/CVE-2026-89322.md) Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions (CVSS 7.2), published 2026-10-07
- [CVE-2026-19585](https://rewindex.com/cve/CVE-2026-19585.md) Go-getter vulnerable to a path traversal in S3/GCS directory download handling (CVSS 5.3), published 2026-10-08
- [CVE-2026-105765](https://rewindex.com/cve/CVE-2026-105765.md) Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API (CVSS 7.5), published 2026-10-26
- [CVE-2026-105608](https://rewindex.com/cve/CVE-2026-105608.md) Consul vulnerable to an authorization bypass in service mesh registration (CVSS 8.8), published 2026-10-26
- [CVE-2026-105626](https://rewindex.com/cve/CVE-2026-105626.md) Consul vulnerable to a denial of service in HTTP APIs (CVSS 7.5), published 2026-10-26
- [CVE-2026-115804](https://rewindex.com/cve/CVE-2026-115804.md) Consul vulnerable to an authorization bypass in health check registration (CVSS 6.4), published 2026-10-26
- [CVE-2026-110720](https://rewindex.com/cve/CVE-2026-110720.md) Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules (CVSS 9.9), published 2026-10-26
- [CVE-2026-102260](https://rewindex.com/cve/CVE-2026-102260.md) Nomad vulnerable to cross-namespace information disclosure in multiple endpoints (CVSS 4.3), published 2026-10-29
- [CVE-2026-107347](https://rewindex.com/cve/CVE-2026-107347.md) Nomad dispatch payload writes can escape the allocation directory through symlinks (CVSS 8.4), published 2026-10-29
- [CVE-2026-119168](https://rewindex.com/cve/CVE-2026-119168.md) Nomad allocation data migration may allow host directory permission modification via symlink following (CVSS 8.8), published 2026-10-29
- [CVE-2026-13303](https://rewindex.com/cve/CVE-2026-13303.md) Boundary vulnerable to server-side request forgery in Vault credential store (CVSS 8.7), published 2026-10-29

## Cite this

HashiCorp posted 3 status incidents in October 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hashicorp/2026/10
- Citation: HashiCorp, “HashiCorp in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hashicorp/2026/10 (CC BY 4.0).
- Markdown link: `[HashiCorp: HashiCorp in October 2026 (2026-10-01)](https://rewindex.com/company/hashicorp/2026/10)`


---
Canonical: https://rewindex.com/company/hashicorp/2026/10 · Markdown: https://rewindex.com/company/hashicorp/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:34:37.066Z