Two PHP vulnerabilities, including the recently identified PHP2Shell vulnerability, prompted precautionary service suspensions and security reviews as patches were released. The flaws could allow unauthenticated attackers to execute arbitrary code and remotely control servers, but no real-world exploitation had been confirmed. In Japan, some ministries partially suspended webpages, MUFG Bank conducted extraordinary system maintenance affecting services including online investment trust account openings, West Japan Railway Company suspended about 60 group websites, and Zensho Holdings halted app services for its Sukiya and Hama-sushi restaurant chains from the night of Oct. 21. Chief Cabinet Secretary Minoru Kihara said on Oct. 22 that no damage linked to the flaws had been reported on government websites. BNB Chain said PHP is absent from its technology stack and that its network and core infrastructure were unaffected. PHP is used by 69.3% of websites worldwide whose server-side programming language is known. Coinbase Chief Security Officer Jeff Lunglhofer and BitGo also said their platforms were unaffected, while Binance co-founder Changpeng Zhao warned that some websites could remain unpatched. The PHP Foundation attributed response delays to months of halted decision-making and limited resources, calling the episode a structural failure, while the Japanese Bankers Association said no impact had been confirmed on interbank settlement operations.