CompaniesVercelMonthly reportsOctober 2026
Vercel in October 2026: incidents, uptime and changes
5incidents posted
3labelled major or critical
98.89%free of major/critical
98.70%free of any incident
0price changes
13notable page changes
Vendor-reported outage time 8 h 13 min, incident time 9 h 40 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 3 · Minor 2
Major and critical incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Vercel Auth login failures for pages with Deployment Protection enabled | Major | 16 min | resolved | 10-06 | |
| Delays in Drains, Observability, and Workflow in Washington (iad1) | Major | 1.4 h | resolved | 10-10 | |
| Increased build and deployment failures | Major | 6.6 h | resolved | 10-12 |
Other incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Elevated Sandbox error rates in Paris (cdg1) | Minor | 25 min | resolved | 10-06 | |
| Delays in Logs and Observability data | Minor | 1.0 h | resolved | 10-23 |
Pricing, legal and trust page changes
- Terms (legal) page changed Terms of serviceTerms (legal) page
- Trust page changed Trust / securityTrust page
- Pricing page changed: price increase PricingPricing page
- Trust page changed Trust / securityTrust page
- Trust page changed Trust / securityTrust page
- Pricing page changed: price increase PricingPricing page
- Trust page changed Trust / securityTrust page
- Terms (legal) page changed Terms of serviceTerms (legal) page
- Trust page changed Trust / securityTrust page
- Privacy (legal) page changed Privacy policyPrivacy (legal) page
- Trust page changed Trust / securityTrust page
- Trust page changed Trust / securityTrust page
- Pricing page changed: price increase PricingPricing page
CVEs published
- CVE-2026-103004 next.js cache leak on warm `use cache` handlers accessing root param (CVSS 5.3)
- CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint (CVSS 5.4)
- CVE-2026-94544 Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages (CVSS 4.2)
- CVE-2026-94543 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications (CVSS 5.3)
- CVE-2026-94483 Next.js: Server-Side Request Forgery in Image Optimization (CVSS 6.5)
- CVE-2026-94485 Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass (CVSS 5.3)
- CVE-2026-94484 Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service (CVSS 4.8)
- CVE-2026-109375 Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction (CVSS 6.1)
- CVE-2026-94482 Next.js: Denial of Service in App Router using Server Actions (CVSS 8.2)
Cite this
Vercel posted 5 status incidents in October 2026 (3 major or critical); 0 price changes and 13 notable page changes observed.
- Title
- Vercel in October 2026
- Vendor
- Vercel
- Date
- URL
- https://rewindex.com/company/vercel/2026/10