Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Patch

authentik 2026.2

Support for authentik 2026.2 ended on 18/08/2026. There are no more security updates for this branch.

End of support reached

Latest version: 2026.2.7, released on 09/09/2026

End of support: 18/08/2026

No known vulnerability open in 2026.2.7

Vulnerabilities in authentik 2026.2

6 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.

CVE-2026-49448, CVSS 3.1: 9.8: fixed in 2026.2.4
CVE-2026-42849, CVSS 3.1: 9.3: fixed in 2026.2.3
CVE-2026-49443, CVSS 3.1: 8.8: fixed in 2026.2.4
CVE-2026-47201, CVSS 3.1: 8.5: fixed in 2026.2.4
CVE-2026-41577, CVSS 4.0: 6.9: fixed in 2026.2.3
CVE-2026-41569, CVSS 4.0: 6.9: fixed in 2026.2.3

Get notified

Add authentik with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.

Watch authentik 2026.2

Already have an account? Log in and add authentik 2026.2

All branches of authentik