PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Resolved

Started

Lasted 90h 10m

View official incident ↗

Updates

  1. Resolved

    Please visit our Security Advisories page at https://www.notion.com/security/advisories for any future updates.

  2. Monitoring

    Status: No impact identified; review ongoing We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

  3. Identified

    We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.