Magento Analyzer Magento News →

Magento & Mage-OS

Magento Updates

The latest versions, the security patches that came out between them, and how to get your shop up to date. Releases are synced automatically from GitHub, system requirements come from magento.watch; support dates follow Adobe's lifecycle page.

Latest version per supported line

Line Latest Released Support Notes
2.4.9 2.4.9
PHP 8.5 · MySQL 8.4 · MariaDB 11.8 / 12.3 · OpenSearch 3 · Composer 2.10
 12 May 2026 Until May 2029 Release notes
2.4.8 2.4.8-p5
PHP 8.3 / 8.4 · MySQL 8.4 · MariaDB 11.4 / 11.8 · OpenSearch 3 · Elasticsearch 8 · Composer 2.10
 12 May 2026 Until May 2028 Release notes
2.4.7 2.4.7-p10
PHP 8.2 / 8.3 · MariaDB 10.11 / 11.8 · OpenSearch 2.19 / 3 · Elasticsearch 8 · Composer 2.10
 12 May 2026 Until May 2027 Release notes
2.4.6 2.4.6-p15
PHP 8.1 / 8.2 · MariaDB 10.11 · OpenSearch 2.19 / 3 · Composer 2.2.26+
 12 May 2026 Extended until Aug 2027 Release notes

Security patches

Adobe also ships isolated security patches between the regular releases. They are applied on top of the latest patch version. All announcements: Adobe security bulletins.

October 2026 — security update (APSB26-153)

Hardening of email-template validation and rendering, the password-reset token lookup, customer search filters over REST/GraphQL/SOAP, HTML escaping and the WYSIWYG validator. Backend-only: only the 2.4.6, 2.4.7 and 2.4.9 builds can be recognised from outside, so MageInfo shows no October status for 2.4.8.

Versions: 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, 2.4.9

Adobe's patch article →

September 2026 — security update (APSB26-138)

IDOR and ACL fixes, a path-traversal fix in import/export, and an XSS fix in the admin order-create VAT message.

Versions: 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, 2.4.9

Adobe's patch article →

August 2026 — security update (APSB26-92)

Out-of-band patch bundle, per version, applied as .patch files on top of the latest -pN release.

Adobe's patch article →

July 2026 — Gallery XSS hardening

Out-of-band hardening of the product gallery (__disableTmpl).

Looking for a fix for a specific bug?

Between releases Adobe publishes individual fixes through the Quality Patches Tool. Adobe's documentation, or search the patches for your version on magento.watch (an independent community project).

Recent releases

Magento Open Source

Mage-OS

How to update

  1. Check that your server meets the requirements of the target version (PHP, database, search engine) — see the table above and Adobe's system requirements.
  2. Back up the database and the code, and do the update on a staging copy first.
  3. Point Composer at the new version (Adobe Commerce: use product-enterprise-edition): 
    composer require magento/composer-root-update-plugin ~2.0 --no-update
composer require-commerce magento/product-community-edition 2.4.x --no-update
composer update
  4. Run bin/magento setup:upgrade, then compile, deploy static content and flush the cache.
  5. Re-test checkout, payments and your custom modules, then repeat on production in a quiet period.

Full details: Adobe's upgrade guide.

Need help updating?

We update Magento shops regularly — patch releases, security fixes and full upgrades.