This report does not constitute a rating action. Critical vulnerabilities in PHP Hypertext Preprocessor (PHP), a programming language used by 60% to 70% of all websites, could enable attackers to execute unauthorized remote code on unpatched websites, potentially providing access to servers and a route into connected systems. Once compromised, these systems could be disrupted and exploited for the theft of data. The flaws, which appear to have been present for decades, were discovered by security researchers using AI models. These researchers announced the vulnerabilities to alert defenders to the risk, and patches have since been developed. Nonetheless, the extent of PHP use and weaknesses in some organizations'IT management mean it is likely that some vulnerabilities will remain unpatched
