CompaniesOktaMonthly reportsOctober 2026
Okta in October 2026: incidents, uptime and changes
7incidents posted
3labelled major or critical
93.54%free of major/critical
86.01%free of any incident
0price changes
3notable page changes
Vendor-reported outage time 2.0 days, incident time 4.3 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 3 · Minor 4
Major and critical incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Service Disruption in Workflows | Major | not resolved | resolved | 10-01 | |
| Okta Cell - EU1 has gone into Read Only Mode | Major | -445 min | resolved | 10-13 | |
| Group Push Delays on OK3 | Major | not resolved | resolved | 10-21 |
Other incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Group Push failures in EU1 | Minor | not resolved | resolved | 10-13 | |
| Reporting Unavailable | Minor | not resolved | resolved | 10-21 | |
| Degraded Performance: Delays in Outbound SMS Delivery | Minor | not resolved | identified | 10-28 | |
| Office 365 Domain Federation Failures | Minor | 10 h | resolved | 10-29 |
Pricing, legal and trust page changes
- Privacy (legal) page changed Privacy policyPrivacy (legal) page
- Trust page changed Trust / securityTrust page
- Privacy (legal) page changed Privacy policyPrivacy (legal) page
CVEs published
- CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows (CVSS 6.0)
- CVE-2026-107369 Improper Validation of Post-Login Redirect URL in nextjs-auth0 (CVSS 6.1)
- CVE-2026-107370 Improper Request Handling for Active Directory Logins in auth0-lock (CVSS 5.3)
- CVE-2026-107371 Missing Verification of auth_time Claim in auth0.js (CVSS 5.4)
- CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer (CVSS 5.3)
- CVE-2026-78633 Denial of Service in Okta RADIUS Agent Packet Parser (CVSS 6.5)
- CVE-2026-85473 Out-of-Range Timestamp Claim Handling in auth0/java-jwt (CVSS 5.3)
- CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway (CVSS 8.1)
- CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway (CVSS 9.1)
Cite this
Okta posted 7 status incidents in October 2026 (3 major or critical); 0 price changes and 3 notable page changes observed.
- Title
- Okta in October 2026
- Vendor
- Okta
- Date
- URL
- https://rewindex.com/company/okta/2026/10