Security Advisory: PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Incident Report for BitTitan

Resolved

On October 21, 2026, the NSA and FBI issued guidance on two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution.

We reviewed our systems for exposure. The MigrationWiz platform does not use PHP and is not affected. Our marketing website uses PHP, and we applied the necessary patches. We have confirmed that the vulnerability has been addressed.

We conclusively determined there has been no impact on customer data or service availability. No action is required from customers. Migrations, mailboxes, and account access are unaffected.

Posted Oct 21, 2026 - 14:31 PDT

This incident affected: BitTitan Website, MigrationWiz, and MigrationWiz DE.