{"id":114367,"date":"2026-10-29T09:48:11","date_gmt":"2026-10-29T08:48:11","guid":{"rendered":"https:\/\/www.codeur.com\/blog\/?p=114367"},"modified":"2026-10-29T10:03:57","modified_gmt":"2026-10-29T09:03:57","slug":"faille-php2shell-attaques","status":"publish","type":"post","link":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/","title":{"rendered":"Faille PHP2Shell&nbsp;: les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Une semaine apr\u00e8s la d\u00e9couverte de la <a href=\"https:\/\/www.codeur.com\/blog\/faille-php2shell\/\">faille PHP2Shell<\/a>, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les failles activement exploit\u00e9es. Les grandes institutions ont coup\u00e9 leurs sites par pr\u00e9caution, le temps de les mettre \u00e0 jour. Les petits sites, eux, restent souvent expos\u00e9s sans le savoir.<\/p>\n\n\n\n<div class=\"article-summary\">\n  <h3>En bref<\/h3>\n  <ul>\n    <li>Des millions de tentatives d&#8217;attaque ont \u00e9t\u00e9 enregistr\u00e9es depuis le 21 octobre.<\/li>\n    <li>Plus de 74 000 tentatives visaient des sites WordPress au cours des deux premiers jours.<\/li>\n    <li>Des pirates ont r\u00e9ussi \u00e0 prendre le contr\u00f4le de serveurs install\u00e9s par des chercheurs pour observer les attaques.<\/li>\n    <li>Aucune entreprise n&#8217;a encore d\u00e9clar\u00e9 avoir \u00e9t\u00e9 pirat\u00e9e, mais de nombreux sites ne sont toujours pas \u00e0 jour.<\/li>\n    <li>La seule protection fiable reste la mise \u00e0 jour de PHP.<\/li>\n  <\/ul>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Des millions d&#8217;attaques en quelques jours<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Les pirates n&#8217;ont pas attendu l&#8217;annonce officielle. Amazon a rep\u00e9r\u00e9 une premi\u00e8re tentative <a href=\"https:\/\/securityaffairs.com\/201479\/hacking\/php2shell-attacks-started-four-days-before-public-disclosure-aws-reports.html\" target=\"_blank\" rel=\"noreferrer noopener\">d\u00e8s le 17 octobre<\/a>, quatre jours avant la publication des correctifs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Le 21 octobre, tout s&#8217;acc\u00e9l\u00e8re. Cloudflare, qui prot\u00e8ge une grande partie des sites web, compte quelques milliers de tentatives avant l&#8217;annonce, puis des dizaines de milliers 45 minutes apr\u00e8s, et <a href=\"https:\/\/www.theregister.com\/cyber-crime\/2026\/10\/22\/hackers-pile-on-php2shell-as-aws-reveals-attacks-began-before-disclosure\/5304749\" target=\"_blank\" rel=\"noreferrer noopener\">plusieurs millions<\/a> dans les jours suivants. Une \u00e9quipe de l&#8217;universit\u00e9 de Delft a vu des attaques venir de <a href=\"https:\/\/theregister.com\/cyber-crime\/2026\/10\/27\/cisa-confirms-php2shell-under-attack-as-researchers-clock-successful-exploits\/5305681\" target=\"_blank\" rel=\"noreferrer noopener\">plus de 600 adresses dans 70 pays<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Le 26 octobre, l&#8217;agence am\u00e9ricaine de cybers\u00e9curit\u00e9 (CISA) a ajout\u00e9 PHP2Shell \u00e0 sa liste des failles activement exploit\u00e9es. Elle a donn\u00e9 trois jours aux administrations am\u00e9ricaines pour se mettre \u00e0 jour.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"826\" src=\"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-1024x826.png\" alt=\"\" class=\"wp-image-114303\" srcset=\"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-1024x826.png 1024w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-300x242.png 300w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-768x619.png 768w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-60x48.png 60w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-370x298.png 370w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-570x460.png 570w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-270x218.png 270w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php-740x597.png 740w, https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/courbe-attaques-php.png 1240w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>WordPress et les petits sites en premi\u00e8re ligne<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WordPress fait tourner une grande partie des sites vitrines et des boutiques en ligne, et il fonctionne avec PHP. Wordfence, un outil de s\u00e9curit\u00e9 tr\u00e8s r\u00e9pandu sur WordPress, a bloqu\u00e9 <a href=\"https:\/\/www.techtarget.com\/news\/php2shell-explained-timeline-of-the-global-vulnerability-crisis\/872935\/\" target=\"_blank\" rel=\"noreferrer noopener\">plus de 74 000 tentatives d&#8217;attaque<\/a> en seulement deux jours. Mettre \u00e0 jour WordPress et ses extensions ne suffit pas&nbsp;: c&#8217;est PHP, le moteur qui fait tourner le site, qu&#8217;il faut mettre \u00e0 jour.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Les attaques sont automatiques. Des robots testent les sites les uns apr\u00e8s les autres, sans les choisir. Un petit site n&#8217;a donc aucune raison d&#8217;\u00eatre \u00e9pargn\u00e9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Or beaucoup de sites tra\u00eenent. Plus de 700 000 serveurs dans le monde tournent avec une <a href=\"https:\/\/www.ictjournal.ch\/news\/2026-10-23\/php2shell-des-milliers-de-serveurs-vulnerables-des-attaques-deja-tentees-update\" target=\"_blank\" rel=\"noreferrer noopener\">version de PHP si ancienne<\/a> qu&#8217;elle ne recevra aucun correctif. Les grandes organisations ont r\u00e9agi vite&nbsp;: des services de la Ville de Paris, la M\u00e9tropole europ\u00e9enne de Lille ou l&#8217;universit\u00e9 de Gen\u00e8ve ont <a href=\"https:\/\/www.lappelfrance.fr\/2026\/10\/22\/faille-php2shell-les-institutions-se-sont-protegees-les-petits-sites-restent-exposes\/\" target=\"_blank\" rel=\"noreferrer noopener\">coup\u00e9 leurs sites par pr\u00e9caution<\/a>. Une PME, elle, ne sait souvent m\u00eame pas qu&#8217;elle est concern\u00e9e.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attention aussi \u00e0 votre type d&#8217;h\u00e9bergement. OVHcloud a corrig\u00e9 lui-m\u00eame ses h\u00e9bergements mutualis\u00e9s, mais les clients qui louent un serveur priv\u00e9 (VPS) ou d\u00e9di\u00e9 doivent faire la mise \u00e0 jour eux-m\u00eames.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Ce que font les pirates une fois entr\u00e9s<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Pour observer les attaques, des chercheurs installent des serveurs pi\u00e8ges, qui ressemblent \u00e0 des sites ordinaires. Ce qu&#8217;ils ont vu donne une id\u00e9e pr\u00e9cise de ce qui attend un site non mis \u00e0 jour.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Moins d&#8217;une heure et demie pour s&#8217;installer<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Chez la soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 ELLIO, un attaquant a mis <a href=\"https:\/\/ellio.tech\/en\/blog\/php2shell-what-we-observed-and-what-to-do\/\" target=\"_blank\" rel=\"noreferrer noopener\">48 minutes<\/a> pour passer d&#8217;un simple test \u00e0 une attaque qui fonctionne. Au bout de 81 minutes, il d\u00e9posait d\u00e9j\u00e0 un fichier pour garder un acc\u00e8s permanent au serveur. Ce type de porte d\u00e9rob\u00e9e permet de revenir quand on veut, m\u00eame apr\u00e8s une mise \u00e0 jour.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Des serveurs pris en main \u00e0 distance<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Le 24 octobre, un chercheur a constat\u00e9 <a href=\"https:\/\/www.securityweek.com\/php2shell-exploitation-moves-from-probes-to-working-shells\/\" target=\"_blank\" rel=\"noreferrer noopener\">35 prises de contr\u00f4le r\u00e9ussies<\/a> sur ses serveurs pi\u00e8ges, en quelques heures. Leur configuration \u00e9tait plut\u00f4t favorable aux attaquants, mais c&#8217;est la preuve que l&#8217;attaque fonctionne en conditions r\u00e9elles.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Vos mots de passe et cl\u00e9s d&#8217;acc\u00e8s vis\u00e9s<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Les attaquants cherchent \u00e0 <a href=\"https:\/\/thehackernews.com\/2026\/10\/php2shell-exploit-attempts-hit-millions.html\" target=\"_blank\" rel=\"noreferrer noopener\">r\u00e9cup\u00e9rer les identifiants<\/a> enregistr\u00e9s sur le serveur. Pour une boutique en ligne, cela peut inclure l&#8217;acc\u00e8s \u00e0 la base clients, au service de paiement ou \u00e0 l&#8217;outil d&#8217;emailing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Votre serveur utilis\u00e9 contre d&#8217;autres<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Certains pirates tentent d&#8217;enr\u00f4ler les serveurs dans un r\u00e9seau de machines pirat\u00e9es, une variante de Mirai, pour saturer d&#8217;autres sites. Votre site devient alors un outil d&#8217;attaque, et votre h\u00e9bergeur peut le suspendre sans pr\u00e9avis.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Pas encore de victime connue, mais un danger confirm\u00e9<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u00c0 ce jour, aucune organisation, publique ou priv\u00e9e, n&#8217;a annonc\u00e9 avoir \u00e9t\u00e9 pirat\u00e9e par PHP2Shell. Deux annonces d&#8217;intrusion, l&#8217;une de Sophos, l&#8217;autre de Palo Alto Networks, ont m\u00eame <a href=\"https:\/\/theregister.com\/cyber-crime\/2026\/10\/27\/cisa-confirms-php2shell-under-attack-as-researchers-clock-successful-exploits\/5305681\" target=\"_blank\" rel=\"noreferrer noopener\">\u00e9t\u00e9 retir\u00e9es<\/a> faute de preuves.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ce n&#8217;est pas une raison pour attendre. Une entreprise pirat\u00e9e ne s&#8217;en rend pas toujours compte tout de suite, et elle ne le crie pas sur les toits. Les pirates, eux, ont d\u00e9j\u00e0 une m\u00e9thode qui fonctionne et des millions de sites \u00e0 tester. De plus, une <a href=\"https:\/\/www.it-connect.fr\/php-cve-2026-115560-session-upload-progress\/\" target=\"_blank\" rel=\"noreferrer noopener\">nouvelle faille PHP<\/a>, d\u00e9couverte le 23 octobre, n&#8217;est pas encore corrig\u00e9e.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Trois r\u00e9flexes d\u00e8s aujourd&#8217;hui<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Pas besoin d&#8217;\u00eatre expert pour agir. Il suffit de poser les bonnes questions aux bonnes personnes.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Connaissez votre version de PHP.<\/strong> Elle figure dans l&#8217;espace client de votre h\u00e9bergeur, ou dans Outils > Sant\u00e9 du site sur WordPress. Les versions corrig\u00e9es sont 8.5.12, 8.4.27, 8.3.36 et 8.2.35.<\/li>\n\n\n\n<li><strong>Faites mettre \u00e0 jour PHP.<\/strong> Sur un h\u00e9bergement mutualis\u00e9, demandez par \u00e9crit \u00e0 votre h\u00e9bergeur si c&#8217;est fait. Sur un serveur priv\u00e9, confiez la mise \u00e0 jour \u00e0 un d\u00e9veloppeur, qui pourra aussi d\u00e9sactiver le r\u00e9glage vis\u00e9 par la nouvelle faille.<\/li>\n\n\n\n<li><strong>Faites v\u00e9rifier que personne n&#8217;est d\u00e9j\u00e0 entr\u00e9.<\/strong> Si votre site est rest\u00e9 sans mise \u00e0 jour plusieurs jours, demandez un contr\u00f4le et changez vos mots de passe et cl\u00e9s d&#8217;acc\u00e8s. Pensez aussi \u00e0 vos outils internes, comme un extranet ou une interface d&#8217;administration.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Faites s\u00e9curiser votre site par un professionnel<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vous ne savez pas quelle version de PHP fait tourner votre site, ou personne ne s&#8217;en occupe depuis sa mise en ligne&nbsp;? Ne restez pas dans le doute alors que les robots testent les sites par millions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/www.codeur.com\/\">Publiez un projet \u00ab Mise \u00e0 jour et contr\u00f4le de s\u00e9curit\u00e9 PHP \u00bb sur Codeur.com<\/a><\/strong> et recevez rapidement des devis de d\u00e9veloppeurs et d&#8217;administrateurs syst\u00e8me freelances.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><em>Vous \u00eates freelance&nbsp;?<\/em> Beaucoup de vos clients n&#8217;ont pas encore r\u00e9agi. Un simple message pour leur proposer de v\u00e9rifier leur site peut leur \u00e9viter bien des ennuis.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les failles activement exploit\u00e9es. Les grandes institutions ont coup\u00e9 leurs sites par pr\u00e9caution, le temps de les mettre \u00e0 jour. Les petits sites, eux, restent souvent expos\u00e9s sans le savoir. En bref Des [&hellip;]<\/p>\n","protected":false},"author":67,"featured_media":114369,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[140],"tags":[],"class_list":["post-114367","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-php"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour<\/title>\n<meta name=\"description\" content=\"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour\" \/>\n<meta property=\"og:description\" content=\"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/\" \/>\n<meta property=\"og:site_name\" content=\"Codeur.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/fr-fr.facebook.com\/codeurfreelance\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T08:48:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-29T09:03:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Aude Marty\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@martyaude\" \/>\n<meta name=\"twitter:site\" content=\"@codeur\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aude Marty\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/\"},\"author\":{\"name\":\"Aude Marty\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#\\\/schema\\\/person\\\/d6a8f77c2dd7441ef10ea2ef7abd0b57\"},\"headline\":\"Faille PHP2Shell&nbsp;: les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour\",\"datePublished\":\"2026-10-29T08:48:11+00:00\",\"dateModified\":\"2026-10-29T09:03:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/\"},\"wordCount\":1116,\"publisher\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/attaques-faille-php2shell.jpg\",\"articleSection\":[\"PHP\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/\",\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/\",\"name\":\"Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/attaques-faille-php2shell.jpg\",\"datePublished\":\"2026-10-29T08:48:11+00:00\",\"dateModified\":\"2026-10-29T09:03:57+00:00\",\"description\":\"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/attaques-faille-php2shell.jpg\",\"contentUrl\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/attaques-faille-php2shell.jpg\",\"width\":1200,\"height\":675,\"caption\":\"attaques faille php2shell\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/faille-php2shell-attaques\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"D\u00e9veloppement\",\"item\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/developpement\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Langages\",\"item\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/developpement\\\/langages\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"PHP\",\"item\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/developpement\\\/langages\\\/php\\\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Faille PHP2Shell&nbsp;: les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/\",\"name\":\"Codeur.com\",\"description\":\"codeur\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#organization\",\"name\":\"Codeur.com\",\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/logo-codeur-com.png\",\"contentUrl\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/logo-codeur-com.png\",\"width\":2560,\"height\":465,\"caption\":\"Codeur.com\"},\"image\":{\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/fr-fr.facebook.com\\\/codeurfreelance\\\/\",\"https:\\\/\\\/x.com\\\/codeur\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/codeur\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCgj9ySM9xy3gdL8qBafl9Uw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/#\\\/schema\\\/person\\\/d6a8f77c2dd7441ef10ea2ef7abd0b57\",\"name\":\"Aude Marty\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g\",\"caption\":\"Aude Marty\"},\"description\":\"V\u00e9ritable touche-\u00e0-tout du web, Aude est toujours au courant des derni\u00e8res nouveaut\u00e9s et des nouveaux outils pour freelances.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/martyaude\\\/\",\"https:\\\/\\\/x.com\\\/martyaude\"],\"url\":\"https:\\\/\\\/www.codeur.com\\\/blog\\\/author\\\/aude\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour","description":"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/","og_locale":"fr_FR","og_type":"article","og_title":"Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour","og_description":"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les","og_url":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/","og_site_name":"Codeur.com","article_publisher":"https:\/\/fr-fr.facebook.com\/codeurfreelance\/","article_published_time":"2026-10-29T08:48:11+00:00","article_modified_time":"2026-10-29T09:03:57+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg","type":"image\/jpeg"}],"author":"Aude Marty","twitter_card":"summary_large_image","twitter_creator":"@martyaude","twitter_site":"@codeur","twitter_misc":{"\u00c9crit par":"Aude Marty","Dur\u00e9e de lecture estim\u00e9e":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#article","isPartOf":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/"},"author":{"name":"Aude Marty","@id":"https:\/\/www.codeur.com\/blog\/#\/schema\/person\/d6a8f77c2dd7441ef10ea2ef7abd0b57"},"headline":"Faille PHP2Shell&nbsp;: les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour","datePublished":"2026-10-29T08:48:11+00:00","dateModified":"2026-10-29T09:03:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/"},"wordCount":1116,"publisher":{"@id":"https:\/\/www.codeur.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#primaryimage"},"thumbnailUrl":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg","articleSection":["PHP"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/","url":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/","name":"Faille PHP2Shell : les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour","isPartOf":{"@id":"https:\/\/www.codeur.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#primaryimage"},"image":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#primaryimage"},"thumbnailUrl":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg","datePublished":"2026-10-29T08:48:11+00:00","dateModified":"2026-10-29T09:03:57+00:00","description":"Une semaine apr\u00e8s la d\u00e9couverte de la faille PHP2Shell, les attaques se comptent par millions. Les autorit\u00e9s am\u00e9ricaines la classent d\u00e9sormais parmi les","breadcrumb":{"@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#primaryimage","url":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg","contentUrl":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2026\/10\/attaques-faille-php2shell.jpg","width":1200,"height":675,"caption":"attaques faille php2shell"},{"@type":"BreadcrumbList","@id":"https:\/\/www.codeur.com\/blog\/faille-php2shell-attaques\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.codeur.com\/blog\/"},{"@type":"ListItem","position":2,"name":"D\u00e9veloppement","item":"https:\/\/www.codeur.com\/blog\/developpement\/"},{"@type":"ListItem","position":3,"name":"Langages","item":"https:\/\/www.codeur.com\/blog\/developpement\/langages\/"},{"@type":"ListItem","position":4,"name":"PHP","item":"https:\/\/www.codeur.com\/blog\/developpement\/langages\/php\/"},{"@type":"ListItem","position":5,"name":"Faille PHP2Shell&nbsp;: les pirates attaquent d\u00e9j\u00e0 les sites non mis \u00e0 jour"}]},{"@type":"WebSite","@id":"https:\/\/www.codeur.com\/blog\/#website","url":"https:\/\/www.codeur.com\/blog\/","name":"Codeur.com","description":"codeur","publisher":{"@id":"https:\/\/www.codeur.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.codeur.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.codeur.com\/blog\/#organization","name":"Codeur.com","url":"https:\/\/www.codeur.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.codeur.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2022\/04\/logo-codeur-com.png","contentUrl":"https:\/\/www.codeur.com\/blog\/wp-content\/uploads\/2022\/04\/logo-codeur-com.png","width":2560,"height":465,"caption":"Codeur.com"},"image":{"@id":"https:\/\/www.codeur.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/fr-fr.facebook.com\/codeurfreelance\/","https:\/\/x.com\/codeur","https:\/\/www.linkedin.com\/company\/codeur\/","https:\/\/www.youtube.com\/channel\/UCgj9ySM9xy3gdL8qBafl9Uw"]},{"@type":"Person","@id":"https:\/\/www.codeur.com\/blog\/#\/schema\/person\/d6a8f77c2dd7441ef10ea2ef7abd0b57","name":"Aude Marty","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae918d51b377a3b9585cfdc38b3d7078fa61c40e14449af59264a7b44e51f153?s=96&d=mm&r=g","caption":"Aude Marty"},"description":"V\u00e9ritable touche-\u00e0-tout du web, Aude est toujours au courant des derni\u00e8res nouveaut\u00e9s et des nouveaux outils pour freelances.","sameAs":["https:\/\/www.linkedin.com\/in\/martyaude\/","https:\/\/x.com\/martyaude"],"url":"https:\/\/www.codeur.com\/blog\/author\/aude\/"}]}},"_links":{"self":[{"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/posts\/114367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/comments?post=114367"}],"version-history":[{"count":3,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/posts\/114367\/revisions"}],"predecessor-version":[{"id":114372,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/posts\/114367\/revisions\/114372"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/media\/114369"}],"wp:attachment":[{"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/media?parent=114367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/categories?post=114367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.codeur.com\/blog\/wp-json\/wp\/v2\/tags?post=114367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}