# Red Hat (incl. Quay.io) in April 2026: incidents, uptime and changes

> Red Hat (incl. Quay.io) in April 2026: 4 incidents on its status page (2 major or critical), 99.81% free of major or critical incidents (vendor-reported), 5 CVEs. From Rewindex’s archive of Red Hat (incl. Quay.io)’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/red-hat/2026/04
Last updated: 2026-11-01T05:01:55Z

- Incidents posted: 4 (major/critical: 2) · Maintenance: 2
- By vendor impact label: major 2, minor 1, none 1
- Uptime (vendor-reported): 99.81% free of major/critical incidents, 96.48% free of any incident; outage time 1 h 20 min, incident time 25 h 20 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 5
- Previous month: [March 2026](https://rewindex.com/company/red-hat/2026/03.md) · Next: [May 2026](https://rewindex.com/company/red-hat/2026/05.md) · [All months](https://rewindex.com/company/red-hat/reports.md) · [Red Hat (incl. Quay.io)](https://rewindex.com/company/red-hat.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Erraneous Advisory email notifications](https://rewindex.com/company/red-hat/incidents/mt1j5ptnbrb5.md) | major | 2026-04-09 17:10 UTC | 2026-04-09 17:10 UTC | 0 min | resolved |
| [Quay.io Push/Pull Degraded](https://rewindex.com/company/red-hat/incidents/rgf6sx9lcjyd.md) | major | 2026-04-21 22:50 UTC | 2026-04-22 00:09 UTC | 1.3 h | postmortem |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Subscription threshold exceeded notifications for non-Pay as you go products are showing misleading values](https://rewindex.com/company/red-hat/incidents/qmsq39cp5bm6.md) | none | 2026-04-03 14:04 UTC | 2026-04-16 14:33 UTC | 13 d | resolved |
| [Erraneous Advisory email notifications](https://rewindex.com/company/red-hat/incidents/mt1j5ptnbrb5.md) | major | 2026-04-09 17:10 UTC | 2026-04-09 17:10 UTC | 0 min | resolved |
| [\[Scheduled\] Migration of china.cdn.redhat.com providers](https://rewindex.com/company/red-hat/incidents/qj39s0t7584q.md) | minor | 2026-04-20 21:00 UTC | not resolved | ongoing | unknown |
| [Quay.io Push/Pull Degraded](https://rewindex.com/company/red-hat/incidents/rgf6sx9lcjyd.md) | major | 2026-04-21 22:50 UTC | 2026-04-22 00:09 UTC | 1.3 h | postmortem |

## CVEs published

- [CVE-2026-2377](https://rewindex.com/cve/CVE-2026-2377.md) Mirror-registry: quay: quay: server-side request forgery via log export functionality (CVSS 6.5), published 2026-04-08
- [CVE-2026-32589](https://rewindex.com/cve/CVE-2026-32589.md) Mirror-registry: quay: insecure direct object reference in blobupload (CVSS 7.4), published 2026-04-08
- [CVE-2026-32590](https://rewindex.com/cve/CVE-2026-32590.md) Mirror-registry: remote code execution using pickle deserialization (CVSS 7.1), published 2026-04-08
- [CVE-2026-32591](https://rewindex.com/cve/CVE-2026-32591.md) Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration (CVSS 5.2), published 2026-04-08
- [CVE-2026-6848](https://rewindex.com/cve/CVE-2026-6848.md) Quay: red hat quay: authentication bypass allows privileged actions without valid credentials (CVSS 5.4), published 2026-04-22

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [\[Scheduled\] Ask Red Hat - System updates](https://rewindex.com/company/red-hat/incidents/x824m825ztcp.md) | maintenance | 2026-04-22 17:02 UTC | 2026-04-22 18:02 UTC | 1.0 h | resolved |
| [\[Scheduled\] Hybrid Cloud Console Inventory DB Maintenance 2026-04-27](https://rewindex.com/company/red-hat/incidents/nj9my1c6bvhp.md) | maintenance | 2026-04-27 13:00 UTC | 2026-04-27 14:00 UTC | 1.0 h | resolved |

## Cite this

Red Hat (incl. Quay.io) posted 4 status incidents in April 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/red-hat/2026/04
- Citation: Red Hat (incl. Quay.io), “Red Hat (incl. Quay.io) in April 2026” (2026-04-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/red-hat/2026/04 (CC BY 4.0).
- Markdown link: `[Red Hat (incl. Quay.io): Red Hat (incl. Quay.io) in April 2026 (2026-04-01)](https://rewindex.com/company/red-hat/2026/04)`


---
Canonical: https://rewindex.com/company/red-hat/2026/04 · Markdown: https://rewindex.com/company/red-hat/2026/04.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:55:04.260Z