On October 21, critical security issues were identified for PHP Hypertext Preprocessor (PHP), a server-side scripting language. These flaws create a pathway for unauthenticated attackers to infiltrate and run their own code before the system can protect itself, creating a serious risk for anything that relies on PHP. Patches have been released to address this issue and are currently being deployed.
We strongly urge all suppliers to immediately review their use of PHP, apply the necessary updates and ensure that any PHP components exposed to the internet are fully secured or mitigated. Report any cybersecurity concerns to the Supplier Cyber Incident team.
This is an evolving situation, and swift action is essential to protect against potential threats.
RTX supplier code of conduct
Pratt & Whitney is a world leader in the design, manufacture and service of aircraft engines and auxiliary power systems, revolutionizing modern flight and going beyond for over 100 years.
Supplier portals
Pratt & Whitney Strategic Business Units (SBUs) have historically had their own independent supplier portals, which resulted in today’s current operations with multiple supplier portals. As RTX works towards a common set of digital tools, suppliers may encounter more than one portal depending on the Pratt & Whitney business unit they work with, the product line or legacy company their parts support, or the types of transactions (quality, purchase orders, forecasting, invoices, etc.). If you are unsure which supplier portal to use, refer to your purchase order or your supply chain professional.