BitTitan incident
Security Advisory: PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Resolved on October 21, 2026, affecting BitTitan Website and MigrationWiz and 1 more.
On October 21, 2026, the NSA and FBI issued guidance on two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution. We reviewed our systems for exposure. The MigrationWiz platform does not use PHP and is not affected. Our marketing website uses PHP, and we applied the necessary patches. We have confirmed that the vulnerability has been addressed. We conclusively determined there has been no impact on customer data or service availability. No action is required from customers. Migrations, mailboxes, and account access are unaffected.
Affected components
Update timeline
- resolved Oct 21, 2026, 09:31 PM UTC
On October 21, 2026, the NSA and FBI issued guidance on two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution. We reviewed our systems for exposure. The MigrationWiz platform does not use PHP and is not affected. Our marketing website uses PHP, and we applied the necessary patches. We have confirmed that the vulnerability has been addressed. We conclusively determined there has been no impact on customer data or service availability. No action is required from customers. Migrations, mailboxes, and account access are unaffected.
Your product runs on more than BitTitan
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services