Synced 17 Jun 2026 22:27 UTC Account

Is PHP 5.6.40 patched?

PHP · cycle 5.6 · end of life · Official site ↗
5.6.4040/100End of life
Health score40/100
Open issues0
Exploited now0
Cycle 5.6 EOL2018-12-31
Latest release8.5.7

Summary iPlain-English security status for PHP 5.6.40, built from its CVEs, active-exploitation data, end-of-life date and latest release.

PHP 5.6.40 is part of the 5.6 release line. No known vulnerabilities affect it in our data. The 5.6 line reached end-of-life on 2018-12-31, so it no longer receives security patches. The latest supported PHP release is 8.5.7.

Known issues affecting 5.6.40

None found for this version. ✓

Frequently asked

Is PHP 5.6.40 patched?

PHP 5.6.40 is end-of-life and no longer receives security patches. Move to 8.5.7.

When does PHP 5.6 reach end-of-life?

PHP 5.6 reached end-of-life on 2018-12-31 and no longer receives security patches.

What is the latest version of PHP?

The latest supported PHP release is 8.5.7.

Is PHP 5.6.40 still receiving security updates?

No — PHP 5.6.40 is on the 5.6 line, which reached end-of-life on 2018-12-31 and no longer receives security updates. Upgrade to 8.5.7 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against PHP's official advisory before you patch or upgrade — PHP official site ↗