On October 21, 2026, the NSA and FBI issued guidance on two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution. We reviewed our systems for exposure. The MigrationWiz platform does not use PHP and is not affected. Our marketing website uses PHP, and we applied the necessary patches. We have confirmed that the vulnerability has been addressed. We conclusively determined there has been no impact on customer data or service availability. No action is required from customers. Migrations, mailboxes, and account access are unaffected.