# Notion: Incident updated: PHP2Shell (CVE-2026-109618, CVE-2026-109619)

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-23 00:33 UTC · Detected: 2026-10-23 00:33 UTC
- [Source: https://www.notion-status.com/incidents/01M5K1RNRANQ1YWEAF2W6R0N51](https://www.notion-status.com/incidents/01M5K1RNRANQ1YWEAF2W6R0N51)
- [Company: Notion](https://rewindex.com/company/notion.md)
- Versions: before incident\_version:110/01M5K1RNRANQ1YWEAF2W6R0N51@5bc8bdb8dc74 → after incident\_version:110/01M5K1RNRANQ1YWEAF2W6R0N51@b26a2af86966
- Change 1 of 1 for this incident

Incident page (full timeline): [PHP2Shell (CVE-2026-109618, CVE-2026-109619)](https://rewindex.com/company/notion/incidents/01M5K1RNRANQ1YWEAF2W6R0N51.md)
## What changed

**1. Changed: Status**

```diff
- identified
+ monitoring
```

**2. Added: Update** (monitoring) · 2026-10-23 00:24 UTC

```diff
+ Status: No impact identified; review ongoing We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-23 00:33 UTC | Incident updated: PHP2Shell (CVE-2026-109618, CVE-2026-109619) (this change) | Normal progress |

All Notion changes: [timeline](https://rewindex.com/company/notion/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/r61f9ce36691105 · Markdown: https://rewindex.com/change/r61f9ce36691105.md · JSON: https://rewindex.com/api/v1/changes/r61f9ce36691105 · Generated 2026-10-24T12:03:51.150Z