On October 21, critical security issues were identified for PHP Hypertext Preprocessor (PHP), a server-side scripting language. These flaws create a pathway for unauthenticated attackers to infiltrate and run their own code before the system can protect itself, creating a serious risk for anything that relies on PHP. Patches have been released to address this issue and are currently being deployed.
We strongly urge all suppliers to immediately review their use of PHP, apply the necessary updates and ensure that any PHP components exposed to the internet are fully secured or mitigated. Report any cybersecurity concerns to the Supplier Cyber Incident team.
This is an evolving situation, and swift action is essential to protect against potential threats.
Additional Raytheon supplier links
RTX supplier code of conduct
Our suppliers are an integral part of the global Raytheon team. They deliver innovative, cost-effective solutions that meet our high standards of quality and performance and enable us to solve our customers' most pressing challenges.
Supplier portals
Raytheon’s primary supplier portal is EXOSTAR, with some landed companies using separate portals. As RTX works towards a common set of digital tools, suppliers may encounter more than one portal depending on the RTX business unit they work with, the product line or legacy company their parts support, or the types of transactions (quality, purchase orders, forecasting, invoices, etc.). If you are unsure which supplier portal to use, refer to your purchase order or your supply chain professional.