Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Patch

CakePHP 4.0

Support for CakePHP 4.0 has ended. There are no more security updates for this branch.

End of support reached

Latest version: 4.0.10, released on 07/12/2020

End of support: no date known

2 known vulnerabilities open in 4.0.10

Vulnerabilities in CakePHP 4.0

2 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.

CVE-2020-35239, CVSS 3.1: 8.8: still open in 4.0.10
CVE-2026-55590, CVSS 4.0: 5.1: still open in 4.0.10

Get notified

Add CakePHP with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.

Watch CakePHP 4.0

Already have an account? Log in and add CakePHP 4.0

All branches of CakePHP