Changes Notion PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Notion: Incident updated: PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Incident updateNormal progress (rule, 100%)Changed 2026-10-23 00:33 UTCwww.notion-status.com

Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

~~Struck in red~~ is what Notion removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1

~~identified~~

monitoring

AddedUpdatemonitoring2026-10-23 00:24 UTC#2

not present

Status: No impact identified; review ongoing We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 23
Before captured 00:23 UTC
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on Oct 24, 00:41 UTC. Record hash 60133ae5a930390d…
Download proof
Oct 23
After captured 00:33 UTC
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on Oct 24, 00:41 UTC. Record hash 147e8fee705b60e4…
Download proof

History of this incident

YesterdayFriday, October 23Fri, Oct 23

1 incident change

Normal progress
00:33Incident
Incident updatePHP2Shell (CVE-2026-109618, CVE-2026-109619)this change

All Notion changes Notion profile Markdown JSON