Notion Status · History · Incident #152581

RESOLVED

PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Minor · Started Oct 23, 2026 · 12:14 AM

Duration

3d 18h 9m
Severity

Minor
Detection lead

—
User reports

—

Summary

PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Please visit our Security Advisories page at <https://www.notion.com/security/advisories> for any future updates.

Started

Oct 23, 2026 · 12:14 AM
Resolved

Oct 26, 2026 · 6:24 PM
Duration

3d 18h 9m
Severity

None

Event timeline

How this incident unfolded

◆

Identified
Oct 23 · 12:14 AM Notion

We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.
◉

Monitoring
Oct 23 · 12:24 AM Notion

**Status: No impact identified; review ongoing** We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.
✓

Resolved
Oct 26 · 6:24 PM Notion

Please visit our Security Advisories page at <https://www.notion.com/security/advisories> for any future updates.

Pattern

Other recent incidents

Browse full incident history →

Get an email when Notion opens, updates or resolves an incident.

Add it as a dependency monitor. The Free plan includes one.

Start Monitoring Free