{"id":115170,"date":"2026-10-26T15:18:26","date_gmt":"2026-10-26T14:18:26","guid":{"rendered":"https:\/\/blog.mailfence.com\/vulnerabilite-php2shell-votre-compte-mailfence-est-en-securite\/"},"modified":"2026-10-29T11:12:17","modified_gmt":"2026-10-29T10:12:17","slug":"vulnerabilite-php2shell-mailfence-securise","status":"publish","type":"post","link":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/","title":{"rendered":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\" id=\"h-\">Deux failles critiques de PHP ont secou\u00e9 Internet la semaine derni\u00e8re. Connues sous le nom de \u00ab PHP2Shell \u00bb, les failles CVE-2026-109618 et CVE-2026-109619 permettent aux pirates d&rsquo;ex\u00e9cuter du code sur des serveurs web sans m\u00eame avoir \u00e0 se connecter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si vous avez suivi l&rsquo;actualit\u00e9, vous vous demandez sans doute si vos e-mails sont en s\u00e9curit\u00e9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Votre compte Mailfence n&rsquo;est pas concern\u00e9.<\/strong> Vos e-mails, vos documents, votre agenda et vos contacts restent enti\u00e8rement prot\u00e9g\u00e9s. Voici ce qui s&rsquo;est pass\u00e9 et pourquoi vous pouvez continuer \u00e0 utiliser Mailfence comme d&rsquo;habitude.<\/p>\n\n\n\n<h2 id=\"h-qu-est-ce-que-php2shell\" class=\"wp-block-heading\">Qu&rsquo;est-ce que PHP2Shell ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>PHP2Shell fait r\u00e9f\u00e9rence \u00e0 deux failles de s\u00e9curit\u00e9 critiques (CVE-2026-109618 et CVE-2026-109619) dans PHP<\/strong>, le langage de programmation qui alimente environ 75 % de tous les sites web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.php.net\/\" target=\"_blank\" rel=\"noreferrer noopener\">Le projet PHP a publi\u00e9 des correctifs<\/a> le 21 octobre 2026. Cependant, <a href=\"https:\/\/watchtowr.com\/intelligence\/php-remote-code-execution-php2shell\/\" target=\"_blank\" rel=\"noreferrer noopener\">watchTowr a confirm\u00e9 que des attaques \u00e9taient en cours<\/a> ce m\u00eame jour, les premi\u00e8res tentatives remontant au 17 octobre.<\/p>\n\n\n\n<h2 id=\"h-pourquoi-php2shell-n-affecte-t-il-pas-mailfence\" class=\"wp-block-heading\">Pourquoi PHP2Shell n&rsquo;affecte-t-il pas Mailfence ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Voici ce qui est rassurant : <strong>Mailfence n&rsquo;utilise pas PHP pour son service.<\/strong> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00c9tant donn\u00e9 que PHP2Shell cible sp\u00e9cifiquement les environnements de serveurs PHP, cette voie d&rsquo;attaque n&rsquo;existe tout simplement pas sur nos syst\u00e8mes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Le moteur d&rsquo;ex\u00e9cution principal de PHP ne fait pas partie de notre pile technologique ; vos donn\u00e9es Mailfence n&rsquo;ont donc jamais \u00e9t\u00e9 expos\u00e9es \u00e0 ces vuln\u00e9rabilit\u00e9s.<\/strong><\/p>\n\n\n\n<h2 id=\"h-notre-reaction\" class=\"wp-block-heading\">Notre r\u00e9action<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00eame si nos syst\u00e8mes ne sont pas directement vuln\u00e9rables, nous prenons tr\u00e8s au s\u00e9rieux tout incident de s\u00e9curit\u00e9 majeur.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Notre \u00e9quipe de s\u00e9curit\u00e9 a examin\u00e9 l&rsquo;ensemble des syst\u00e8mes d\u00e8s que l&rsquo;information a \u00e9t\u00e9 rendue publique.<\/strong> Cela a notamment donn\u00e9 lieu \u00e0 un audit complet des services auxiliaires et des d\u00e9pendances vis-\u00e0-vis de tiers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pour notre blog et les pages de notre base de connaissances destin\u00e9es au grand public, <strong>des correctifs de s\u00e9curit\u00e9 avaient \u00e9t\u00e9 install\u00e9s par notre h\u00e9bergeur avant m\u00eame la publication officielle des mises \u00e0 jour.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u00c0 aucun moment, les comptes Mailfence ni les donn\u00e9es des utilisateurs n&rsquo;ont \u00e9t\u00e9 menac\u00e9s.<\/strong> Nous continuons \u00e0 suivre de pr\u00e8s l&rsquo;\u00e9volution de la situation.<\/p>\n\n\n\n<h2 id=\"h-que-devez-vous-faire\" class=\"wp-block-heading\">Que devez-vous faire ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Si vous utilisez Mailfence comme messagerie principale, vous n\u2019avez aucune mesure \u00e0 prendre. Votre compte est en s\u00e9curit\u00e9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Toutefois, <strong>PHP2Shell peut affecter d&rsquo;autres services que vous utilisez.<\/strong> Les plateformes auto-h\u00e9berg\u00e9es, les sites WordPress et les applications web fonctionnant sous PHP sont tous potentiellement vuln\u00e9rables.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Voici ce que nous vous recommandons :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Mettez imm\u00e9diatement \u00e0 jour tous vos services bas\u00e9s sur PHP.<\/strong> Si vous g\u00e9rez vos propres sites web ou applications, installez sans tarder la derni\u00e8re version de PHP.<\/li>\n\n\n\n<li><strong>M\u00e9fiez-vous des e-mails de hame\u00e7onnage.<\/strong> Les failles de s\u00e9curit\u00e9 majeures donnent souvent lieu \u00e0 des campagnes de hame\u00e7onnage se pr\u00e9sentant comme des \u00ab mises \u00e0 jour de s\u00e9curit\u00e9 urgentes \u00bb. Ne cliquez pas sur les liens suspects.<\/li>\n\n\n\n<li><strong>Activez l&rsquo;authentification \u00e0 deux facteurs.<\/strong> Si vous n&rsquo;avez pas encore activ\u00e9 <a href=\"https:\/\/kb.mailfence.com\/kb\/setup-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">l&rsquo;authentification \u00e0 deux facteurs (2FA) sur votre compte Mailfence<\/a>, c&rsquo;est le moment id\u00e9al pour le faire.<\/li>\n\n\n\n<li><strong>Utilisez des mots de passe forts et diff\u00e9rents pour chaque service.<\/strong> Un gestionnaire de mots de passe vous facilite la t\u00e2che. Si un compte est pirat\u00e9 ailleurs, votre messagerie Mailfence reste s\u00e9curis\u00e9e.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"h-pourquoi-l-architecture-de-votre-fournisseur-de-messagerie-est-elle-importante\" class=\"wp-block-heading\">Pourquoi l&rsquo;architecture de votre fournisseur de messagerie est-elle importante ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP2Shell nous rappelle avec force que <strong>ce qui se cache sous le capot de votre service de messagerie rev\u00eat une importance capitale.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Une seule faille de s\u00e9curit\u00e9 dans PHP a expos\u00e9 du jour au lendemain des millions de sites web et d\u2019applications. Les choix technologiques effectu\u00e9s il y a des ann\u00e9es par votre fournisseur de messagerie font soudainement la diff\u00e9rence entre la s\u00e9curit\u00e9 et la vuln\u00e9rabilit\u00e9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mailfence a \u00e9t\u00e9 con\u00e7u d\u00e8s le d\u00e9part en pla\u00e7ant la s\u00e9curit\u00e9 au c\u0153ur de sa philosophie. Cela inclut :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Chiffrement de bout en bout avec OpenPGP<\/strong>: seuls vous et votre destinataire pouvez lire vos e-mails<\/li>\n\n\n\n<li><strong><a href=\"https:\/\/blog.mailfence.com\/fr\/chiffrement-des-donnees-au-repos\/\" target=\"_blank\" rel=\"noreferrer noopener\">Chiffrement au repos<\/a><\/strong> protection des donn\u00e9es stock\u00e9es sur nos serveurs<\/li>\n\n\n\n<li><strong>L\u00e9gislation belge en mati\u00e8re de protection de la vie priv\u00e9e et conformit\u00e9 au RGPD<\/strong>: pas de publicit\u00e9, pas de suivi, pas de portes d\u00e9rob\u00e9es<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Des questions ? N&rsquo;h\u00e9sitez pas \u00e0 nous contacter \u00e0 l&rsquo;adresse support@mailfence.com.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Deux failles critiques de PHP ont secou\u00e9 Internet la semaine derni\u00e8re. Connues sous le nom de \u00ab PHP2Shell \u00bb, les failles CVE-2026-109618 et CVE-2026-109619 permettent aux pirates d&rsquo;ex\u00e9cuter du code sur des serveurs web sans m\u00eame avoir \u00e0 se connecter. Si vous avez suivi l&rsquo;actualit\u00e9, vous vous demandez sans doute si vos e-mails sont en [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":115163,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18589,18591],"tags":[],"class_list":["post-115170","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-confidentialite","category-mailfence-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.6 (Yoast SEO v28.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog<\/title>\n<meta name=\"description\" content=\"Deux failles critiques de PHP, connues sous le nom de \u00ab PHP2Shell \u00bb, font actuellement l&#039;objet d&#039;exploits \u00e0 l&#039;\u00e9chelle mondiale. D\u00e9couvrez pourquoi Mailfence reste s\u00e9curis\u00e9.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog\" \/>\n<meta property=\"og:description\" content=\"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/\" \/>\n<meta property=\"og:site_name\" content=\"Mailfence Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/mailfence\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-26T14:18:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-29T10:12:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"602\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Patrick De Schutter\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@pdeschutter\" \/>\n<meta name=\"twitter:site\" content=\"@mailfence\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Patrick De Schutter\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/\"},\"author\":{\"name\":\"Patrick De Schutter\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#\\\/schema\\\/person\\\/20a0c25f4ff87b6c5510971559c01c28\"},\"headline\":\"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9\",\"datePublished\":\"2026-10-26T14:18:26+00:00\",\"dateModified\":\"2026-10-29T10:12:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/\"},\"wordCount\":760,\"publisher\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-mailfence-secure-featured-image.png\",\"articleSection\":[\"Confidentialit\u00e9\",\"Quoi de neuf Mailfence\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/\",\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/\",\"name\":\"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-mailfence-secure-featured-image.png\",\"datePublished\":\"2026-10-26T14:18:26+00:00\",\"dateModified\":\"2026-10-29T10:12:17+00:00\",\"description\":\"Deux failles critiques de PHP, connues sous le nom de \u00ab PHP2Shell \u00bb, font actuellement l'objet d'exploits \u00e0 l'\u00e9chelle mondiale. D\u00e9couvrez pourquoi Mailfence reste s\u00e9curis\u00e9.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-mailfence-secure-featured-image.png\",\"contentUrl\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-mailfence-secure-featured-image.png\",\"width\":600,\"height\":602,\"caption\":\"Globe icon with shield-off badge representing PHP2Shell vulnerability\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/vulnerabilite-php2shell-mailfence-securise\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Homepage\",\"item\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quoi de neuf Mailfence\",\"item\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/category\\\/mailfence-news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/\",\"name\":\"Mailfence Blog\",\"description\":\"Mailfence Blog. Get the latest news about secure email and Internet privacy.\",\"publisher\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#organization\",\"name\":\"Mailfence\",\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2022\\\/08\\\/Mailfence_logo_pict_and_word_BOUNDED_small.png\",\"contentUrl\":\"https:\\\/\\\/blog.mailfence.com\\\/wp-content\\\/uploads\\\/2022\\\/08\\\/Mailfence_logo_pict_and_word_BOUNDED_small.png\",\"width\":1812,\"height\":358,\"caption\":\"Mailfence\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/mailfence\\\/\",\"https:\\\/\\\/x.com\\\/mailfence\",\"https:\\\/\\\/www.reddit.com\\\/r\\\/Mailfence\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/mailfence\",\"https:\\\/\\\/www.instagram.com\\\/mailfence_\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@mailfence\",\"https:\\\/\\\/en.wikipedia.org\\\/wiki\\\/Mailfence\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/#\\\/schema\\\/person\\\/20a0c25f4ff87b6c5510971559c01c28\",\"name\":\"Patrick De Schutter\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g\",\"caption\":\"Patrick De Schutter\"},\"description\":\"Patrick is the co-founder of Mailfence. He's a serial entrepreneur and startup investor since 1994 and launched several pioneering internet companies such as Allmansland, IP Netvertising or Express.be. He is a strong believer and advocate of encryption and privacy.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/pdeschutter\\\/\",\"https:\\\/\\\/x.com\\\/pdeschutter\"],\"gender\":\"male\",\"knowsLanguage\":[\"English\",\"French\",\"Dutch\",\"Swedish\"],\"url\":\"https:\\\/\\\/blog.mailfence.com\\\/fr\\\/author\\\/patrick\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog","description":"Deux failles critiques de PHP, connues sous le nom de \u00ab PHP2Shell \u00bb, font actuellement l'objet d'exploits \u00e0 l'\u00e9chelle mondiale. D\u00e9couvrez pourquoi Mailfence reste s\u00e9curis\u00e9.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/","og_locale":"fr_FR","og_type":"article","og_title":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog","og_description":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog","og_url":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/","og_site_name":"Mailfence Blog","article_publisher":"https:\/\/www.facebook.com\/mailfence\/","article_published_time":"2026-10-26T14:18:26+00:00","article_modified_time":"2026-10-29T10:12:17+00:00","og_image":[{"width":600,"height":602,"url":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png","type":"image\/png"}],"author":"Patrick De Schutter","twitter_card":"summary_large_image","twitter_creator":"@pdeschutter","twitter_site":"@mailfence","twitter_misc":{"\u00c9crit par":"Patrick De Schutter","Dur\u00e9e de lecture estim\u00e9e":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#article","isPartOf":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/"},"author":{"name":"Patrick De Schutter","@id":"https:\/\/blog.mailfence.com\/fr\/#\/schema\/person\/20a0c25f4ff87b6c5510971559c01c28"},"headline":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9","datePublished":"2026-10-26T14:18:26+00:00","dateModified":"2026-10-29T10:12:17+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/"},"wordCount":760,"publisher":{"@id":"https:\/\/blog.mailfence.com\/fr\/#organization"},"image":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png","articleSection":["Confidentialit\u00e9","Quoi de neuf Mailfence"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/","url":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/","name":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9 | Mailfence Blog","isPartOf":{"@id":"https:\/\/blog.mailfence.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#primaryimage"},"image":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png","datePublished":"2026-10-26T14:18:26+00:00","dateModified":"2026-10-29T10:12:17+00:00","description":"Deux failles critiques de PHP, connues sous le nom de \u00ab PHP2Shell \u00bb, font actuellement l'objet d'exploits \u00e0 l'\u00e9chelle mondiale. D\u00e9couvrez pourquoi Mailfence reste s\u00e9curis\u00e9.","breadcrumb":{"@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#primaryimage","url":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png","contentUrl":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2026\/10\/php2shell-mailfence-secure-featured-image.png","width":600,"height":602,"caption":"Globe icon with shield-off badge representing PHP2Shell vulnerability"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mailfence.com\/fr\/vulnerabilite-php2shell-mailfence-securise\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Homepage","item":"https:\/\/blog.mailfence.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Quoi de neuf Mailfence","item":"https:\/\/blog.mailfence.com\/fr\/category\/mailfence-news\/"},{"@type":"ListItem","position":3,"name":"Vuln\u00e9rabilit\u00e9 PHP2Shell : votre compte Mailfence est en s\u00e9curit\u00e9"}]},{"@type":"WebSite","@id":"https:\/\/blog.mailfence.com\/fr\/#website","url":"https:\/\/blog.mailfence.com\/fr\/","name":"Mailfence Blog","description":"Mailfence Blog. Get the latest news about secure email and Internet privacy.","publisher":{"@id":"https:\/\/blog.mailfence.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mailfence.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/blog.mailfence.com\/fr\/#organization","name":"Mailfence","url":"https:\/\/blog.mailfence.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/blog.mailfence.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2022\/08\/Mailfence_logo_pict_and_word_BOUNDED_small.png","contentUrl":"https:\/\/blog.mailfence.com\/wp-content\/uploads\/2022\/08\/Mailfence_logo_pict_and_word_BOUNDED_small.png","width":1812,"height":358,"caption":"Mailfence"},"image":{"@id":"https:\/\/blog.mailfence.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/mailfence\/","https:\/\/x.com\/mailfence","https:\/\/www.reddit.com\/r\/Mailfence\/","https:\/\/www.linkedin.com\/company\/mailfence","https:\/\/www.instagram.com\/mailfence_\/","https:\/\/www.youtube.com\/@mailfence","https:\/\/en.wikipedia.org\/wiki\/Mailfence"]},{"@type":"Person","@id":"https:\/\/blog.mailfence.com\/fr\/#\/schema\/person\/20a0c25f4ff87b6c5510971559c01c28","name":"Patrick De Schutter","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/504fce782c4af8c40497b54807c4ba30bf391c917fdf953ac6392cb55dfb078e?s=96&d=blank&r=g","caption":"Patrick De Schutter"},"description":"Patrick is the co-founder of Mailfence. He's a serial entrepreneur and startup investor since 1994 and launched several pioneering internet companies such as Allmansland, IP Netvertising or Express.be. He is a strong believer and advocate of encryption and privacy.","sameAs":["https:\/\/www.linkedin.com\/in\/pdeschutter\/","https:\/\/x.com\/pdeschutter"],"gender":"male","knowsLanguage":["English","French","Dutch","Swedish"],"url":"https:\/\/blog.mailfence.com\/fr\/author\/patrick\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/posts\/115170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/comments?post=115170"}],"version-history":[{"count":3,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/posts\/115170\/revisions"}],"predecessor-version":[{"id":115290,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/posts\/115170\/revisions\/115290"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/media\/115163"}],"wp:attachment":[{"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/media?parent=115170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/categories?post=115170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mailfence.com\/fr\/wp-json\/wp\/v2\/tags?post=115170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}