# Vercel in October 2026: incidents, uptime and changes

> Vercel in October 2026: 5 incidents on its status page (3 major or critical), 98.89% free of major or critical incidents (vendor-reported), 13 pricing/legal/trust page changes, 9 CVEs. From Rewindex’s archive of Vercel’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/vercel/2026/10
Last updated: 2026-11-01T00:00:00Z

- Incidents posted: 5 (major/critical: 3) · Maintenance: 0
- By vendor impact label: major 3, minor 2
- Uptime (vendor-reported): 98.89% free of major/critical incidents, 98.70% free of any incident; outage time 8 h 13 min, incident time 9 h 40 min
- Price changes: 0 · Pricing/legal/trust page changes: 13 · Deprecations: 0 · CVEs: 9
- Previous month: [September 2026](https://rewindex.com/company/vercel/2026/09.md) · Next: [November 2026](https://rewindex.com/company/vercel/2026/11.md) · [All months](https://rewindex.com/company/vercel/reports.md) · [Vercel](https://rewindex.com/company/vercel.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Vercel Auth login failures for pages with Deployment Protection enabled](https://rewindex.com/company/vercel/incidents/1dp8c0nfchtg.md) | major | 2026-10-06 16:10 UTC | 2026-10-06 16:26 UTC | 16 min | resolved |
| [Delays in Drains, Observability, and Workflow in Washington (iad1)](https://rewindex.com/company/vercel/incidents/bpzq72pgngc7.md) | major | 2026-10-10 00:15 UTC | 2026-10-10 01:37 UTC | 1.4 h | resolved |
| [Increased build and deployment failures](https://rewindex.com/company/vercel/incidents/sps6n39gm4sg.md) | major | 2026-10-12 13:35 UTC | 2026-10-12 20:11 UTC | 6.6 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Elevated Sandbox error rates in Paris (cdg1)](https://rewindex.com/company/vercel/incidents/xr8lx0kncx0g.md) | minor | 2026-10-06 09:12 UTC | 2026-10-06 09:36 UTC | 25 min | resolved |
| [Vercel Auth login failures for pages with Deployment Protection enabled](https://rewindex.com/company/vercel/incidents/1dp8c0nfchtg.md) | major | 2026-10-06 16:10 UTC | 2026-10-06 16:26 UTC | 16 min | resolved |
| [Delays in Drains, Observability, and Workflow in Washington (iad1)](https://rewindex.com/company/vercel/incidents/bpzq72pgngc7.md) | major | 2026-10-10 00:15 UTC | 2026-10-10 01:37 UTC | 1.4 h | resolved |
| [Increased build and deployment failures](https://rewindex.com/company/vercel/incidents/sps6n39gm4sg.md) | major | 2026-10-12 13:35 UTC | 2026-10-12 20:11 UTC | 6.6 h | resolved |
| [Delays in Logs and Observability data](https://rewindex.com/company/vercel/incidents/4lgcbsr7l8xn.md) | minor | 2026-10-23 16:31 UTC | 2026-10-23 17:32 UTC | 1.0 h | resolved |

## Pricing, legal and trust page changes

- 2026-10-20 12:05 UTC: [Terms (legal) page changed](https://rewindex.com/change/p3643.md) (Terms of service: Terms (legal) page)
- 2026-10-20 12:05 UTC: [Trust page changed](https://rewindex.com/change/p3706.md) (Trust / security: Trust page)
- 2026-10-20 12:05 UTC: [Pricing page changed: price increase](https://rewindex.com/change/p3703.md) (Pricing: Pricing page)
- 2026-10-21 08:45 UTC: [Trust page changed](https://rewindex.com/change/p4467.md) (Trust / security: Trust page)
- 2026-10-22 08:44 UTC: [Trust page changed](https://rewindex.com/change/p5337.md) (Trust / security: Trust page)
- 2026-10-24 08:45 UTC: [Pricing page changed: price increase](https://rewindex.com/change/p6952.md) (Pricing: Pricing page)
- 2026-10-27 08:45 UTC: [Trust page changed](https://rewindex.com/change/p8821.md) (Trust / security: Trust page)
- 2026-10-28 08:44 UTC: [Terms (legal) page changed](https://rewindex.com/change/p9530.md) (Terms of service: Terms (legal) page)
- 2026-10-28 08:44 UTC: [Trust page changed](https://rewindex.com/change/p9604.md) (Trust / security: Trust page)
- 2026-10-28 08:45 UTC: [Privacy (legal) page changed](https://rewindex.com/change/p9493.md) (Privacy policy: Privacy (legal) page)
- 2026-10-29 08:45 UTC: [Trust page changed](https://rewindex.com/change/p10436.md) (Trust / security: Trust page)
- 2026-10-30 08:44 UTC: [Trust page changed](https://rewindex.com/change/p11243.md) (Trust / security: Trust page)
- 2026-10-30 08:45 UTC: [Pricing page changed: price increase](https://rewindex.com/change/p11241.md) (Pricing: Pricing page)

## CVEs published

- [CVE-2026-103004](https://rewindex.com/cve/CVE-2026-103004.md) next.js cache leak on warm \`use cache\` handlers accessing root param (CVSS 5.3), published 2026-10-01
- [CVE-2026-94486](https://rewindex.com/cve/CVE-2026-94486.md) Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint (CVSS 5.4), published 2026-10-02
- [CVE-2026-94544](https://rewindex.com/cve/CVE-2026-94544.md) Next.js: Pending \`use cache\` fill can leak Draft Mode content into regular responses and persisted pages (CVSS 4.2), published 2026-10-02
- [CVE-2026-94543](https://rewindex.com/cve/CVE-2026-94543.md) Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications (CVSS 5.3), published 2026-10-02
- [CVE-2026-94483](https://rewindex.com/cve/CVE-2026-94483.md) Next.js: Server-Side Request Forgery in Image Optimization (CVSS 6.5), published 2026-10-02
- [CVE-2026-94485](https://rewindex.com/cve/CVE-2026-94485.md) Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass (CVSS 5.3), published 2026-10-02
- [CVE-2026-94484](https://rewindex.com/cve/CVE-2026-94484.md) Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service (CVSS 4.8), published 2026-10-02
- [CVE-2026-109375](https://rewindex.com/cve/CVE-2026-109375.md) Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction (CVSS 6.1), published 2026-10-12
- [CVE-2026-94482](https://rewindex.com/cve/CVE-2026-94482.md) Next.js: Denial of Service in App Router using Server Actions (CVSS 8.2), published 2026-10-22

## Cite this

Vercel posted 5 status incidents in October 2026 (3 major or critical); 0 price changes and 13 notable page changes observed.

- Canonical URL: https://rewindex.com/company/vercel/2026/10
- Citation: Vercel, “Vercel in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/vercel/2026/10 (CC BY 4.0).
- Markdown link: `[Vercel: Vercel in October 2026 (2026-10-01)](https://rewindex.com/company/vercel/2026/10)`


---
Canonical: https://rewindex.com/company/vercel/2026/10 · Markdown: https://rewindex.com/company/vercel/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T15:51:00.658Z