rewindex

CompaniesNotionIncidents

Notion: PHP2Shell (CVE-2026-109618, CVE-2026-109619)

No impact listedStatus: monitoringeditedStarted Not resolved2 updateswww.notion-status.com (opens in new tab)

Timeline of updates

  1. identified

    We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

  2. monitoring

    Status: No impact identified; review ongoing
    We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Impact, status and times are the vendor’s own, as last archived. View on www.notion-status.com (opens in new tab).

Notion profileRecent Notion incidentsMarkdownJSON