# Okta in October 2026: incidents, uptime and changes

> Okta in October 2026: 7 incidents on its status page (3 major or critical), 93.54% free of major or critical incidents (vendor-reported), 3 pricing/legal/trust page changes, 9 CVEs. From Rewindex’s archive of Okta’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/okta/2026/10
Last updated: 2026-11-01T00:00:00Z

- Incidents posted: 7 (major/critical: 3) · Maintenance: 0
- By vendor impact label: major 3, minor 4
- Uptime (vendor-reported): 93.54% free of major/critical incidents, 86.01% free of any incident; outage time 2.0 days, incident time 4.3 days
- Price changes: 0 · Pricing/legal/trust page changes: 3 · Deprecations: 0 · CVEs: 9
- Previous month: [September 2026](https://rewindex.com/company/okta/2026/09.md) · Next: none · [All months](https://rewindex.com/company/okta/reports.md) · [Okta](https://rewindex.com/company/okta.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Service Disruption in Workflows](https://rewindex.com/company/okta/incidents/I-11620.md) | major | 2026-10-01 13:17 UTC | not resolved | ongoing | resolved |
| [Okta Cell - EU1 has gone into Read Only Mode](https://rewindex.com/company/okta/incidents/I-11740.md) | major | 2026-10-13 07:25 UTC | 2026-10-13 00:00 UTC | -445 min | resolved |
| [Group Push Delays on OK3](https://rewindex.com/company/okta/incidents/I-11832.md) | major | 2026-10-21 18:49 UTC | not resolved | ongoing | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Service Disruption in Workflows](https://rewindex.com/company/okta/incidents/I-11620.md) | major | 2026-10-01 13:17 UTC | not resolved | ongoing | resolved |
| [Okta Cell - EU1 has gone into Read Only Mode](https://rewindex.com/company/okta/incidents/I-11740.md) | major | 2026-10-13 07:25 UTC | 2026-10-13 00:00 UTC | -445 min | resolved |
| [Group Push failures in EU1](https://rewindex.com/company/okta/incidents/I-11743.md) | minor | 2026-10-13 13:00 UTC | not resolved | ongoing | resolved |
| [Reporting Unavailable](https://rewindex.com/company/okta/incidents/I-11835.md) | minor | 2026-10-21 18:00 UTC | not resolved | ongoing | resolved |
| [Group Push Delays on OK3](https://rewindex.com/company/okta/incidents/I-11832.md) | major | 2026-10-21 18:49 UTC | not resolved | ongoing | resolved |
| [Degraded Performance: Delays in Outbound SMS Delivery](https://rewindex.com/company/okta/incidents/I-11899.md) | minor | 2026-10-28 16:45 UTC | not resolved | ongoing | identified |
| [Office 365 Domain Federation Failures](https://rewindex.com/company/okta/incidents/I-11904.md) | minor | 2026-10-29 13:45 UTC | 2026-10-30 00:00 UTC | 10 h | resolved |

## Pricing, legal and trust page changes

- 2026-10-22 08:44 UTC: [Privacy (legal) page changed](https://rewindex.com/change/p5267.md) (Privacy policy: Privacy (legal) page)
- 2026-10-23 08:45 UTC: [Trust page changed](https://rewindex.com/change/p6048.md) (Trust / security: Trust page)
- 2026-10-29 08:45 UTC: [Privacy (legal) page changed](https://rewindex.com/change/p10354.md) (Privacy policy: Privacy (legal) page)

## CVEs published

- [CVE-2026-78628](https://rewindex.com/cve/CVE-2026-78628.md) Improper Input Validation in the Okta Credential Provider for Windows (CVSS 6.0), published 2026-10-13
- [CVE-2026-107369](https://rewindex.com/cve/CVE-2026-107369.md) Improper Validation of Post-Login Redirect URL in nextjs-auth0 (CVSS 6.1), published 2026-10-13
- [CVE-2026-107370](https://rewindex.com/cve/CVE-2026-107370.md) Improper Request Handling for Active Directory Logins in auth0-lock (CVSS 5.3), published 2026-10-13
- [CVE-2026-107371](https://rewindex.com/cve/CVE-2026-107371.md) Missing Verification of auth\_time Claim in auth0.js (CVSS 5.4), published 2026-10-13
- [CVE-2026-78632](https://rewindex.com/cve/CVE-2026-78632.md) Insecure Default File Permissions in Okta RADIUS Agent Windows Installer (CVSS 5.3), published 2026-10-13
- [CVE-2026-78633](https://rewindex.com/cve/CVE-2026-78633.md) Denial of Service in Okta RADIUS Agent Packet Parser (CVSS 6.5), published 2026-10-13
- [CVE-2026-85473](https://rewindex.com/cve/CVE-2026-85473.md) Out-of-Range Timestamp Claim Handling in auth0/java-jwt (CVSS 5.3), published 2026-10-13
- [CVE-2026-115546](https://rewindex.com/cve/CVE-2026-115546.md) Authentication Source Verification Issue in Okta Access Gateway (CVSS 8.1), published 2026-10-23
- [CVE-2026-115547](https://rewindex.com/cve/CVE-2026-115547.md) Command Execution via Admin Console Input in Okta Access Gateway (CVSS 9.1), published 2026-10-23

## Cite this

Okta posted 7 status incidents in October 2026 (3 major or critical); 0 price changes and 3 notable page changes observed.

- Canonical URL: https://rewindex.com/company/okta/2026/10
- Citation: Okta, “Okta in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/okta/2026/10 (CC BY 4.0).
- Markdown link: `[Okta: Okta in October 2026 (2026-10-01)](https://rewindex.com/company/okta/2026/10)`


---
Canonical: https://rewindex.com/company/okta/2026/10 · Markdown: https://rewindex.com/company/okta/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T14:01:44.789Z