{"id":854797,"date":"2026-10-29T09:47:23","date_gmt":"2026-10-29T08:47:23","guid":{"rendered":"https:\/\/www.stormshield.com\/?p=854797"},"modified":"2026-10-29T09:47:23","modified_gmt":"2026-10-29T08:47:23","slug":"alerte-securite-vulnerabilite-php","status":"publish","type":"post","link":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/","title":{"rendered":"Alerte de s\u00e9curit\u00e9 PHP : la r\u00e9ponse des produits Stormshield"},"content":{"rendered":"

Contexte des vuln\u00e9rabilit\u00e9s PHP<\/h2>\n

Deux vuln\u00e9rabilit\u00e9s critiques impactant la technologie web PHP ont \u00e9t\u00e9 rendues publiques le 21 octobre 2026. Il s'agit des CVE-2026-109618<\/a> et CVE-2026-109619<\/a>, et se sont vues attribuer un score CVSS4.0 de 9,2\/10. PHP \u00e9tant utilis\u00e9 par environ 70% des sites web expos\u00e9s publiquement sur Internet, le potentiel d'attaque est donc gigantesque. Des preuves de concept ont rapidement \u00e9t\u00e9 publi\u00e9es. Nous avons \u00e9galement constat\u00e9 des tentatives d'exploitation dans la nature via nos honeypots<\/a> imm\u00e9diatement apr\u00e8s la publication des failles. Il convient donc d'appliquer une attention particuli\u00e8re \u00e0 ces vuln\u00e9rabilit\u00e9s dont la jonction est intitul\u00e9e PHP2Shell<\/strong>.<\/p>\n

 <\/p>\n

D\u00e9tails techniques des vuln\u00e9rabilit\u00e9s PHP<\/h2>\n

La CVE-2026-109618<\/strong> correspond \u00e0 une erreur de gestion de m\u00e9moire insuffisante (Out-Of-Memory - OOM). Ceci intervient notamment lors du traitement de t\u00e9l\u00e9versement de fichiers via le Content-Type multipart\/form-data<\/code> dans une requ\u00eate HTTP. Si la m\u00e9moire limite, telle que configur\u00e9e dans le php.ini, est atteinte, alors le traitement est interrompu avant que certaines structures internes ne soient correctement initialis\u00e9es. Il en r\u00e9sulte un nettoyage incorrect des donn\u00e9es et une corruption m\u00e9moire. Cela peut \u00eatre exploit\u00e9 afin d'effectuer une ex\u00e9cution de code \u00e0 distance (Remote Code Execution - RCE).<\/p>\n

Pour la CVE-2026-109619<\/strong>, il s'agit d'une vuln\u00e9rabilit\u00e9 de type Use-after-Free (UaF) sur certaines variables globales utilis\u00e9es sur le traitement de requ\u00eates. Il existe des situations o\u00f9, si une interruption intervient sur la requ\u00eate, alors les donn\u00e9es point\u00e9es par certaines variables globales sont effac\u00e9es, mais la variable n'est pas r\u00e9initialis\u00e9e. Elle peut donc toujours acc\u00e9der \u00e0 une section m\u00e9moire dont la dur\u00e9e de vie est normalement termin\u00e9e. Cette incoh\u00e9rence peut \u00e9galement conduire \u00e0 une corruption exploitable et \u00e0 l'ex\u00e9cution de code.<\/p>\n

 <\/p>\n

Versions impact\u00e9es par les vuln\u00e9rabilit\u00e9s PHP<\/h2>\n

Les versions concern\u00e9es sont les suivantes :<\/p>\n

    \n
  • Toutes les versions ant\u00e9rieures \u00e0 8.2.34 (incluse),<\/li>\n
  • Version 8.3 jusqu'\u00e0 la version 8.3.35 (incluse),<\/li>\n
  • Version 8.4 jusqu'\u00e0 la version 8.4.26 (incluse),<\/li>\n
  • Version 8.5 jusqu'\u00e0 la version 8.5.11 (incluse).<\/li>\n<\/ul>\n

     <\/p>\n

    Moyens de protection fournis par Stormshield<\/h2>\n

    Stormshield Network Security<\/h3>\n

    Une signature IPS a \u00e9t\u00e9 publi\u00e9e sur les firewalls Stormshield Network Security (SNS) le 23 octobre 2026, permettant de d\u00e9tecter et bloquer des tentatives d'ex\u00e9cution de code PHP contenues dans les uploads de fichiers de type HTTP multipart\/form-data<\/code>. Et ce via les principaux chemins d'attaques exploit\u00e9s qui ont \u00e9t\u00e9 observ\u00e9s. La signature fonctionne donc via l\u2019analyse du trafic HTTP, qui doit donc \u00eatre d\u00e9chiffr\u00e9 lors de son inspection.<\/p>\n

    Cette signature est :<\/p>\n

      \n
    • http:mix:374<\/strong> \u2192 D\u00e9tection de l'exploitation d'une vuln\u00e9rabilit\u00e9 non authentifi\u00e9e dans PHP (CVE-2026-109618, CVE-2026-109619)<\/li>\n<\/ul>\n

      Recommandations<\/h3>\n

      La premi\u00e8re recommandation est la mise \u00e0 jour de PHP vers une version corrective :<\/p>\n

      \n
      Branche PHP<\/strong><\/span><\/div><\/div><\/div><\/td>
      Version corrective<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr>
      8.2<\/span><\/div><\/div><\/div><\/td>
      8.2.35-1<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr>
      8.3<\/span><\/div><\/div><\/div><\/td>
      8.3.36-1<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr>
      8.4<\/span><\/div><\/div><\/div><\/td>
      8.4.27-1<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr>
      8.5<\/span><\/div><\/div><\/div><\/td>
      8.5.12-1<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n\n

      Bien qu'il n'existe actuellement aucune solution de mitigation compl\u00e8te, certaines actions peuvent \u00e9galement \u00eatre entreprises afin de r\u00e9duire votre exposition \u00e0 ces vuln\u00e9rabilit\u00e9s. Il est important de pr\u00e9ciser que leur application n'emp\u00eache pas pour autant PHP de traiter les requ\u00eates malveillantes. La meilleure r\u00e9ponse consiste donc \u00e0 mettre le service \u00e0 jour.<\/p>\n

        \n
      • D\u00e9sactiver le suivi de progression des uploads de fichiers dans php.ini<\/code>\u00a0:\n
          \n
        • session.upload_progress.enabled = 0<\/code><\/li>\n
        • Attention, si votre site web emploie des barres de progression de t\u00e9l\u00e9chargement, ceci les rendra inop\u00e9rantes.<\/li>\n<\/ul>\n<\/li>\n
        • Bloquer les requ\u00eates de type multipart\/form-data<\/code> avant qu'elles ne soient trait\u00e9es par PHP.\n
            \n
          • Configuration \u00e0 effectuer sur un reverse proxy ou un WAF.<\/li>\n
          • V\u00e9rifier auparavant que cela n'alt\u00e8re pas le comportement de votre site web.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

             <\/p>\n

            Mod\u00e9lisation de l'attaque<\/h2>\n

            MITRE ATT&CK<\/h3>\n

            \"\"<\/h3>\n

            IOC<\/h3>\n

            D\u00e8s la publication des vuln\u00e9rabilit\u00e9s, nos honeypots ont enregistr\u00e9 des tentatives d'exploitations, \u00e0 des fins diverses. Voici le r\u00e9capitulatif de nos observations :<\/p>\n

            \n
            IOC<\/strong><\/span><\/div><\/div><\/div><\/td>
            Type<\/strong><\/span><\/div><\/div><\/div><\/td>
            Commentaire<\/strong><\/span><\/div><\/div><\/div><\/td><\/tr>
            204.76.203[.]7<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            Scanneur<\/span><\/div><\/div><\/div><\/td><\/tr>
            85.11.167[.]243<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            Tente de provoquer une connexion vers un C2 afin de d\u00e9ployer le malware Mirai chez la victime.<\/span><\/div><\/div><\/div><\/td><\/tr>
            45.198.224[.]169<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            Tente de provoquer une connexion vers un C2 afin de d\u00e9ployer le malware Mirai chez la victime.<\/span><\/div><\/div><\/div><\/td><\/tr>
            92.118.112[.]100<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            C2 h\u00e9bergeant le botnet Mirai. Observ\u00e9 \u00e9galement chez nos confr\u00e8res de Sophos<\/a>.<\/span><\/div><\/div><\/div><\/td><\/tr>
            217.60.242[.]76<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            Tente de provoquer une connexion vers un C2 afin de d\u00e9ployer le mineur crypto RedTail chez la victime.<\/span><\/div><\/div><\/div><\/td><\/tr>
            77.90.185[.]20<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            Tente de provoquer une connexion vers un C2 afin de d\u00e9ployer le mineur crypto RedTail chez la victime.<\/span><\/div><\/div><\/div><\/td><\/tr>
            217.60.102[.]5<\/span><\/div><\/div><\/div><\/td>
            IP<\/span><\/div><\/div><\/div><\/td>
            C2 h\u00e9bergeant RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            0c5486f06620e26e316f4b33f318b0d646d5e1133789331aa2fed012360d1486<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            Mirai<\/span><\/div><\/div><\/div><\/td><\/tr>
            917fcc9131c6e9ca16264a85afc62532297bb39eb9d37765dad536c7c8c7735c<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            Dropper RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            8e1a67a5c03b3cd818f046c7a1605afccc0ee5ce437a0d099881f1872b54bc70<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            d1cac82f44b54b0fd244a9e4122811e9ae108a197c7a65a20fd2e7552683e68e<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            d70f917e35813a7ae323e6b2b539d6dbbfc3a3a6599f1fed93430b14ca08b141<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr>
            3f3bf218089d1488617d37f8a5116bb2791eb39ce06a1b5bc9a4cdfe5e94dd39<\/span><\/div><\/div><\/div><\/td>
            Hash<\/span><\/div><\/div><\/div><\/td>
            RedTail<\/span><\/div><\/div><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n\n","protected":false},"excerpt":{"rendered":"

            Contexte des vuln\u00e9rabilit\u00e9s PHP Deux vuln\u00e9rabilit\u00e9s critiques impactant la technologie web PHP ont \u00e9t\u00e9 rendues publiques le 21 octobre 2026. Il s’agit des CVE-2026-109618 et CVE-2026-109619, et se sont vues attribuer un score CVSS4.0 de 9,2\/10. PHP \u00e9tant utilis\u00e9 par environ 70% des sites web…<\/p>\n","protected":false},"author":83,"featured_media":190179,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[1503],"tags":[4368],"business_size":[],"industry":[],"help_mefind":[],"features":[],"type_security":[],"maintenance":[],"offer":[],"administration_tools":[],"cloud_offers":[],"listing_product":[],"class_list":["post-854797","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-alertes","tag-la-cybersecurite-par-stormshield"],"acf":[],"yoast_head":"\nVuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619<\/title>\n<meta name=\"description\" content=\"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619\" \/>\n<meta property=\"og:description\" content=\"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/\" \/>\n<meta property=\"og:site_name\" content=\"Stormshield\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T08:47:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1422\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Stormshield Customer Security Lab\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stormshield\" \/>\n<meta name=\"twitter:site\" content=\"@Stormshield\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stormshield Customer Security Lab\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/\"},\"author\":{\"name\":\"Stormshield Customer Security Lab\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/#\\\/schema\\\/person\\\/a05f467cec789f90c8a355b178743249\"},\"headline\":\"Alerte de s\u00e9curit\u00e9 PHP : la r\u00e9ponse des produits Stormshield\",\"datePublished\":\"2026-10-29T08:47:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/\"},\"wordCount\":661,\"image\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stormshield.com\\\/wp-content\\\/uploads\\\/shutterstock_1534485395-scaled.jpg\",\"keywords\":[\"La cybers\u00e9curit\u00e9 - par Stormshield\"],\"articleSection\":[\"Alertes\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/\",\"url\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/\",\"name\":\"Vuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stormshield.com\\\/wp-content\\\/uploads\\\/shutterstock_1534485395-scaled.jpg\",\"datePublished\":\"2026-10-29T08:47:23+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/#\\\/schema\\\/person\\\/a05f467cec789f90c8a355b178743249\"},\"description\":\"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stormshield.com\\\/wp-content\\\/uploads\\\/shutterstock_1534485395-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.stormshield.com\\\/wp-content\\\/uploads\\\/shutterstock_1534485395-scaled.jpg\",\"width\":2560,\"height\":1422},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/actus\\\/alerte-securite-vulnerabilite-php\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Alerte de s\u00e9curit\u00e9 PHP : la r\u00e9ponse des produits Stormshield\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/\",\"name\":\"Stormshield\",\"description\":\"Stormshield\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stormshield.com\\\/fr\\\/#\\\/schema\\\/person\\\/a05f467cec789f90c8a355b178743249\",\"name\":\"Stormshield Customer Security Lab\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g\",\"caption\":\"Stormshield Customer Security Lab\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619","description":"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/","og_locale":"fr_FR","og_type":"article","og_title":"Vuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619","og_description":"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.","og_url":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/","og_site_name":"Stormshield","article_published_time":"2026-10-29T08:47:23+00:00","og_image":[{"width":2560,"height":1422,"url":"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg","type":"image\/jpeg"}],"author":"Stormshield Customer Security Lab","twitter_card":"summary_large_image","twitter_creator":"@Stormshield","twitter_site":"@Stormshield","twitter_misc":{"\u00c9crit par":"Stormshield Customer Security Lab","Dur\u00e9e de lecture estim\u00e9e":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#article","isPartOf":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/"},"author":{"name":"Stormshield Customer Security Lab","@id":"https:\/\/www.stormshield.com\/fr\/#\/schema\/person\/a05f467cec789f90c8a355b178743249"},"headline":"Alerte de s\u00e9curit\u00e9 PHP : la r\u00e9ponse des produits Stormshield","datePublished":"2026-10-29T08:47:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/"},"wordCount":661,"image":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg","keywords":["La cybers\u00e9curit\u00e9 - par Stormshield"],"articleSection":["Alertes"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/","url":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/","name":"Vuln\u00e9rabilit\u00e9s PHP | CVE-2026-109618 et CVE-2026-109619","isPartOf":{"@id":"https:\/\/www.stormshield.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#primaryimage"},"image":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg","datePublished":"2026-10-29T08:47:23+00:00","author":{"@id":"https:\/\/www.stormshield.com\/fr\/#\/schema\/person\/a05f467cec789f90c8a355b178743249"},"description":"Alerte de s\u00e9curit\u00e9 sur PHP et moyens de protection Stormshield face aux CVE-2026-109618 et CVE-2026-109619.","breadcrumb":{"@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#primaryimage","url":"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg","contentUrl":"https:\/\/www.stormshield.com\/wp-content\/uploads\/shutterstock_1534485395-scaled.jpg","width":2560,"height":1422},{"@type":"BreadcrumbList","@id":"https:\/\/www.stormshield.com\/fr\/actus\/alerte-securite-vulnerabilite-php\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.stormshield.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Alerte de s\u00e9curit\u00e9 PHP : la r\u00e9ponse des produits Stormshield"}]},{"@type":"WebSite","@id":"https:\/\/www.stormshield.com\/fr\/#website","url":"https:\/\/www.stormshield.com\/fr\/","name":"Stormshield","description":"Stormshield","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stormshield.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.stormshield.com\/fr\/#\/schema\/person\/a05f467cec789f90c8a355b178743249","name":"Stormshield Customer Security Lab","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/46b9416c400398c1a9fc878c7a35bd2ae4f79caeeda138facd5cb65a4ab91c5d?s=96&d=mm&r=g","caption":"Stormshield Customer Security Lab"}}]}},"_links":{"self":[{"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/posts\/854797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/comments?post=854797"}],"version-history":[{"count":7,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/posts\/854797\/revisions"}],"predecessor-version":[{"id":854824,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/posts\/854797\/revisions\/854824"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/media\/190179"}],"wp:attachment":[{"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/media?parent=854797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/categories?post=854797"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/tags?post=854797"},{"taxonomy":"business_size","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/business_size?post=854797"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/industry?post=854797"},{"taxonomy":"help_mefind","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/help_mefind?post=854797"},{"taxonomy":"features","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/features?post=854797"},{"taxonomy":"type_security","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/type_security?post=854797"},{"taxonomy":"maintenance","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/maintenance?post=854797"},{"taxonomy":"offer","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/offer?post=854797"},{"taxonomy":"administration_tools","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/administration_tools?post=854797"},{"taxonomy":"cloud_offers","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/cloud_offers?post=854797"},{"taxonomy":"listing_product","embeddable":true,"href":"https:\/\/www.stormshield.com\/fr\/wp-json\/wp\/v2\/listing_product?post=854797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}