Skip to main content

Notion outage on October 23, 2026: PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Notion has reported an incident affecting Notion since 00:14 UTC on 23 October 2026 (8 hours 12 minutes so far).

www.notion.so All times UTC

Open

Official incident reported by Notion

Started
00:14
23 Oct 2026 UTC
Status
Open
not resolved yet
Duration
8h 12m
8 hours 12 minutes so far
Impact
-
as rated by Notion
Updates
2
posted by Notion

Timeline

All times UTC.

Official incident from Notion

PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Monitoring 23 Oct 2026 00:14 UTC View on Notion's status page
  1. Official
    Identified

    We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

  2. Official
    Monitoring

    **Status: No impact identified; review ongoing** We have found no impact to Notion from PHP2Shell. Notion's services do not run PHP. Our review is continuing, and we'll update this notice if anything changes.

"Official" rows are quoted from Notion's public status page, www.notion-status.com. Very long posts are shortened.

What our checkpoints saw

HostTracker's checkpoints, which test www.notion.so from several locations, recorded no outage of 5 minutes or longer during this incident. A provider can report a problem that affects only some features, regions or accounts, which a check of the main address does not see. The live Notion status shows what our checks see right now.

Does your product depend on Notion?

An outage like this one reaches your users through your product, and most teams hear about it from a customer rather than from a dashboard. HostTracker watches any endpoint you name - your own site, an API you call, a vendor you resell - from 300+ locations, confirms a failure from several of them before it says anything, and then tells you by email, SMS, voice call or your chat tool.

You get the same record you are reading here for your own services: every outage timestamped, with the checks that observed it.

Independent measurement by HostTracker. Not affiliated with Notion. Official updates are quoted from Notion's public status page and remain Notion's own words.