CERT-FR reports two critical vulnerabilities that allow an attacker to execute code remotely. Patches have been available since October 21. If your installation is affected, updating it is urgent.
Remote code execution allows an attacker to run their instructions on a server. To find out whether your project is affected, you need to check its PHP version and environment. The CERT-FR bulletin lists the affected versions and patches.
An alert shared across four countries
National agencies have published their guidance. In the Netherlands, the NCSC even reports temporarily taking its own website offline as a precaution.
Summaries of official publications dated October 21, 2026, consulted on October 22. Each card links to the original source.
🇫🇷
France · CERT-FR / ANSSI
cert.cyber.gouv.fr ·
Alert and recommendations
Isolate affected systems and apply patches
CERT-FR recommends isolating affected systems, then migrating to a supported version with the latest patches. Its bulletin confirms that patches are available.
Identify where PHP is used to prepare for the update
Published before the patches were released, the IPA’s early warning asks organisations to identify their use of PHP and prepare to apply updates promptly when available.
The NCSC asks organisations to identify PHP systems and install a patched version. It recommends considering taking systems offline if neither updates nor temporary mitigations can be applied quickly enough.
After checking that your project is a good fit and that the necessary access is available, I offer an analysis within an agreed scope, a walkthrough of the findings and a prioritised action plan. An update can then be agreed as a separate service, after checking feasibility and compatibility.
I’m Jean Z. Sordes. I was developing software before ChatGPT, and had already finished my studies when it launched. I help you understand what’s blocking you and choose the right actions for your project.
Need an experienced developer? Let’s talk about your project. I guide your technical choices; you make the final decisions.
Your project, your blocker, your own words. Let’s keep it simple.
You’re no longer on your own. Let’s move forward together.Technical expertise, by your side.
Hi, I’m Jean!Engineer · educator · entrepreneur
Projects that move forward. Teams that become more independent.
Urgent intervention · Let’s roll up our sleeves
Vibe Pompier
Is your project on fire? You’re no longer on your own.
🔥 👨🚒
Is your app stuck, a feature unresponsive, or the bug list growing? Tell me what’s happening, and we’ll roll up our sleeves together.
I help you understand what’s going wrong, work on the project and check the expected result with you. We put out the fire so you can move forward again.
A free 20-minute call on Notion Calendar. We agree on the paid intervention together afterwards.
🔥BeforeIt’s stuck.A page that never finishes loading. Access that no longer works.
TogetherWe take back control.I make the fixes. We check the affected user journey.
What does rolling up our sleeves look like?
1
Let’s prepare the intervention
Book the free call and prepare the context: your project, the blocker, what you’ve tried and what you want to be able to do.
2
We make a plan
I review the project and the access needed. We agree on the outcome, price and schedule before starting.
3
We put out the fire
I lead the investigation and make the technical fixes. You bring the context and feedback, with no need to code.
4
We check together
We validate the affected user journey. I explain the changes and give you the information you need to continue.
Understand, prioritise, progress
🧑⚕️ 🩺 Vibe Doctor
Diagnosis and ongoing support. Understand what needs improving and prepare the next steps.
I take the time to understand your business, project and needs. Together, we identify useful improvements, choose priorities and plan the next steps. I then support their implementation with advice, coaching and follow-up.
A diagnosis to understand your needs and opportunities.
Clear priorities and a plan for what comes next.
Advice, coaching and ongoing support to help your team progress.
Useful applications of AI: reduce repetitive work, improve your service and make better use of your information.
You make the final decisions. We define the pace and scope together; any hands-on implementation is scoped separately.
Organising an event or looking to train your team? I offer talks on practical uses of AI and web development training. We define the objectives and content around your audience.
From creating courses to a professional qualification.
At MolenGeek Roubaix, I created the content for a web development training programme. I taught and supported learners throughout, up to earning their French professional qualification at bac+2 level (two years of higher education).
Build a learning progression with suitable lessons and exercises.
Guide web projects from interfaces to databases and deployment.
Track learning progress and prepare learners to present their project to an examination panel.
Designed the curriculum and trained learners through to their web and mobile web developer qualification (French bac+2 level). Integrated AI into the programme’s tools and methods.
EE
Entrep Ensemble Lille
Founder
– present
Created a professional network: networking coffees, workshops and visual identity.
AA
Associate Agency
Software Engineer
– present
Software Engineer
–
Requirements definition, design and initial development of customer relationship management (CRM) and enterprise resource planning (ERP) tools.
Product Designer · freelance
Designed the interface and a functional social network prototype. Supervised an intern developer during implementation.
Holberton School France
Technical Instructor
Supported learners in the fundamentals of software development.
Capgemini
Java Development · SNCF Fret assignment
–
Worked on business rules and the generation of technical documentation in PDF format.
CGX
CGX AERO
Angular and C# Developer
–
Designed and developed Angular components and their C#/C++ APIs. Wrote a guide to web application security.
SO
StandOut
WordPress Developer · freelance
–
Adapted a website for mobile, created a homepage and developed a plugin so the client could customise colours, images and text themselves.
LC
Le Catalyseur
Civic service
–
Welcomed visitors and ran activities in the coworking space. Facilitated brainstorming sessions to help incubated project founders develop their ideas.
I supported someone whose Lovable-built application had endless loading screens, redirects and failing features. I took over the project, worked on its structure and introduced methods to keep it moving. I then supported a developer through the handover.
This personal account is anonymised. I have no testimonial or verifiable numerical results for this assignment.
From code to practical tools
Practical tools.
Three tools for Obsidian, a note-taking application. Discover the projects and what they can do.
Scroll through the projects horizontally or choose a name. With the keyboard, use the arrow keys when the gallery has focus.
Hierarchical navigation, illustrated in the project repository.
Obsidian plugin · Note organisation
Dot Navigator
Find your way through a large collection of notes. The plugin organises them into a tree and lets you move or rename a branch along with its child notes.
My contribution, links and details
My work: plugin development, hierarchical navigation, note suggestions and the renaming interface.
No. Explain the context, what should work and what you’ve tried in your own words. I lead the technical work; you contribute information, feedback and validation of the result.
What do we prepare during the free call?
These 20 minutes help us understand your situation and prepare for Vibe Pompier or Vibe Doctor’s diagnosis and ongoing support. We review the project and the access needed, then agree on a proposal before any commitment. Booking this call does not order a paid service.
Are fixes included in Vibe Pompier?
Yes, Vibe Pompier includes fixes for the agreed blocker. Together, we define the expected result and how to check it. If your request needs deeper analysis or a broader redesign, I explain this and propose an appropriate scope before you commit.
Can you work with my tool or technology?
We review your project, its complexity and the access needed before committing. This lets us agree on an intervention suited to your environment and my scope of work.
What is delivered?
The agreed fix, an explanation of the changes and the information you need to continue. We check the affected user journey together. Production deployment or a ready-to-deploy handover is specified in the proposal.
What price and timeline should I expect?
We agree on the deliverable, price, start date and schedule before beginning. You can decide based on a clear proposal, suited to the blocker and the value of resolving it.
When should I choose Vibe Doctor?
Vibe Pompier addresses a specific blocker in an existing project. Vibe Doctor helps you understand needs and possibilities, choose priorities, plan and track implementation over time, with advice and coaching. Useful applications of AI are among the opportunities to explore. You make the final decisions; technical interventions are scoped before commitment.
The first step is a conversation.
A blocker to resolve? A direction to define?
20 free minutes to prepare for Vibe Pompier or take the first step with Vibe Doctor, based on your situation and goals.
Before our call, prepare a few sentences about your project or blocker. Do not share confidential information.