# Notion: PHP2Shell (CVE-2026-109618, CVE-2026-109619)

- Impact (vendor’s label): none
- Status: monitoring · edited after publishing
- Started: 2026-10-23 00:14 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 2
- [Vendor status page: https://www.notion-status.com/incidents/01M5K1RNRANQ1YWEAF2W6R0N51](https://www.notion-status.com/incidents/01M5K1RNRANQ1YWEAF2W6R0N51)
- [Company: Notion](https://rewindex.com/company/notion.md)

## Timeline of updates

- **identified** 2026-10-23 00:14 UTC: We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.
- **monitoring** 2026-10-23 00:24 UTC: Status: No impact identified; review ongoing We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

## Rewindex changes for this incident

- 2026-10-23 00:33 UTC: [Incident updated: PHP2Shell (CVE-2026-109618, CVE-2026-109619)](https://rewindex.com/change/r61f9ce36691105.md)


---
Canonical: https://rewindex.com/company/notion/incidents/01M5K1RNRANQ1YWEAF2W6R0N51 · Markdown: https://rewindex.com/company/notion/incidents/01M5K1RNRANQ1YWEAF2W6R0N51.md · JSON: https://rewindex.com/api/v1/companies/notion/incidents/01M5K1RNRANQ1YWEAF2W6R0N51 · Generated 2026-10-24T11:13:26.832Z