{"id":"INC-aquasec-c7qdx9b6944h","kind":"incident","aliases":[],"related":[],"title":"Aqua Security: Aqua Supply Chain Vulnerability Scanning Service Disruption Notice","description":"Aqua Supply Chain Vulnerability Scanning Service Disruption Notice - Resolved\n\nSince approximately 09:00 UTC on August 31, 2025, our Supply Chain Vulnerability Scanning service experienced a degradation, causing CI/CD pipeline timeouts and timeouts on the Supply Chain page.\n\nUpdate: The applied fix has been confirmed effective following a period of active monitoring, and the service has returned to normal operation. The Supply Chain Vulnerability Scanning component status has been updated to Operational.\n\nWe apologize for the inconvenience this incident may have caused and thank you for your patience.","summary":"Aqua Security's Supply Chain Vulnerability Scanning service degraded from about 09:00 UTC on August 31, 2025, causing CI/CD pipeline timeouts and timeouts on the Supply Chain page. The service has since been restored and the component is marked Operational.","severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Aqua Security","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["aqua-security","aquasec","ci-cd","incident","security","supply-chain-scanning","vendor"],"not_affected_if":["no-aqua-integration"],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-08-31T17:18:15+00:00","first_seen_at":"2026-11-08T17:00:33+00:00","triaged_at":"2026-11-08T17:03:20+00:00","updated_at":"2026-11-08T17:03:20+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-08T17:03:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Aqua Security: supply chain scanning outage broke customer CI/CD pipelines","impact":"low","summary":"Aqua Security's Supply Chain Vulnerability Scanning service degraded from about 09:00 UTC on August 31, 2025, causing CI/CD pipeline timeouts and timeouts on the Supply Chain page. The service has since been restored and the component is marked Operational.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["aqua-security","ci-cd","supply-chain-scanning"],"confidence":0.7,"fix_status":"none","needs_auth":"unknown","worst_case":"Scanning requests time out and CI pipelines stall; no data exposure stated","analyst_note":"","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-aqua-integration"],"who_is_affected":"Teams whose CI/CD pipelines call Aqua Security's Supply Chain Vulnerability Scanning service may have seen build timeouts during the incident window. This is an availability outage, not a flaw that exposes data or code, and the sources say the service is back to normal, so there is nothing to change on your side.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000702,"input_tokens":4670,"output_tokens":471,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'00':43B,84C '09':42B,83C '2025':48B,89C '31':47B,88C 'activ':122C 'apolog':145C 'appli':112C 'approxim':82C 'aqua':1A,3A,15A,18B,31B,72C 'aqua-secur':17B 'aquasec':13A,20B 'august':46B,87C 'c7qdx9b6944h':14A 'caus':49B,99C,153C 'cd':23B 'chain':5A,28B,35B,58B,74C,92C,108C,134C 'ci':22B 'ci-cd':21B 'ci/cd':50B,100C 'compon':68B,137C 'confirm':116C 'degrad':39B,98C 'disrupt':9A,78C 'effect':117C 'experienc':96C 'fix':113C 'follow':118C 'inc':12A 'inc-aquasec-c7qdx9b6944h':11A 'incid':24B,150C 'inconveni':148C 'mark':70B 'may':151C 'monitor':123C 'normal':130C 'notic':10A,79C 'oper':71B,131C,143C 'page':59B,109C 'patienc':159C 'period':120C 'pipelin':51B,101C 'resolv':80C 'restor':65B 'return':128C 'scan':7A,29B,37B,76C,94C,136C 'secur':2A,19B,25B,32B 'security':16A 'servic':8A,38B,61B,77C,95C,126C 'sinc':63B,81C 'status':138C 'suppli':4A,27B,34B,57B,73C,91C,107C,133C 'supply-chain-scan':26B 'thank':155C 'timeout':52B,54B,102C,104C 'updat':110C,141C 'utc':44B,85C 'vendor':30B 'vulner':6A,36B,75C,93C,135C","nicknames":[],"mitigations":[],"who_affected":"Teams whose CI/CD pipelines call Aqua Security's Supply Chain Vulnerability Scanning service may have seen build timeouts during the incident window. This is an availability outage, not a flaw that exposes data or code, and the sources say the service is back to normal, so there is nothing to change on your side.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["aquasecurity","security"],"ptokens":["aqua","security"],"labels":["aquasec","aquasecurity","cicd","critical","incident","security","supplychainscanning","vendor"],"campaign_type":null,"search_a":"'aqua':1A,3A,15A 'aquasec':13A 'c7qdx9b6944h':14A 'chain':5A 'disrupt':9A 'inc':12A 'inc-aquasec-c7qdx9b6944h':11A 'notic':10A 'scan':7A 'secur':2A 'security':16A 'servic':8A 'suppli':4A 'vulner':6A","search_b":"'00':43B '09':42B '2025':48B '31':47B 'aqua':18B,31B 'aqua-secur':17B 'aquasec':20B 'august':46B 'caus':49B 'cd':23B 'chain':28B,35B,58B 'ci':22B 'ci-cd':21B 'ci/cd':50B 'compon':68B 'degrad':39B 'incid':24B 'mark':70B 'oper':71B 'page':59B 'pipelin':51B 'restor':65B 'scan':29B,37B 'secur':19B,25B,32B 'servic':38B,61B 'sinc':63B 'suppli':27B,34B,57B 'supply-chain-scan':26B 'timeout':52B,54B 'utc':44B 'vendor':30B 'vulner':36B","search_c":"'00':84C '09':83C '2025':89C '31':88C 'activ':122C 'apolog':145C 'appli':112C 'approxim':82C 'aqua':72C 'august':87C 'caus':99C,153C 'chain':74C,92C,108C,134C 'ci/cd':100C 'compon':137C 'confirm':116C 'degrad':98C 'disrupt':78C 'effect':117C 'experienc':96C 'fix':113C 'follow':118C 'incid':150C 'inconveni':148C 'may':151C 'monitor':123C 'normal':130C 'notic':79C 'oper':131C,143C 'page':109C 'patienc':159C 'period':120C 'pipelin':101C 'resolv':80C 'return':128C 'scan':76C,94C,136C 'servic':77C,95C,126C 'sinc':81C 'status':138C 'suppli':73C,91C,107C,133C 'thank':155C 'timeout':102C,104C 'updat':110C,141C 'utc':85C 'vulner':75C,93C,135C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-08-31T17:18:15+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"aquasec:c7qdx9b6944h","url":"https://stspg.io/yjzm3r037776","severity":"critical","published_at":"2026-08-31T17:18:15+00:00","modified_at":"2026-08-31T19:30:45+00:00","first_seen_at":"2026-11-08T17:00:33+00:00","fetched_at":"2026-11-09T02:40:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}