This report does not constitute a rating action. RICHMOND (S&P Global Ratings) Oct. 27, 2026--The extent of the use of PHP, a programming language used by 60% to 70% of all websites, combined with sometimes weak IT management means recently identified vulnerabilities will likely remain unpatched in some cases, exposing systems to attack, S&P Global Ratings said in a report published today. The report,"Credit FAQ:The Cyber And Credit Risk Implications Of The PHP2Shell Vulnerability ,"describes how critical vulnerabilities in PHP could enable attackers to execute unauthorized remote code on unpatched websites, potentially providing access to servers and a route into connected systems. Once compromised, these systems could be disrupted and exploited for the theft of data. The
