BitTitan incident
Security Advisory: PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)
BitTitan experienced a notice incident on October 21, 2026 affecting BitTitan Website and MigrationWiz and 1 more component, lasting –. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- resolved Oct 21, 2026, 09:31 PM UTC
On October 21, 2026, the NSA and FBI issued guidance on two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution. We reviewed our systems for exposure. The MigrationWiz platform does not use PHP and is not affected. Our marketing website uses PHP, and we applied the necessary patches. We have confirmed that the vulnerability has been addressed. We conclusively determined there has been no impact on customer data or service availability. No action is required from customers. Migrations, mailboxes, and account access are unaffected.