Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Patch

Contao 5.6

Support for Contao 5.6 ended on 14/02/2026. There are no more security updates for this branch.

End of support reached

Latest version: 5.6.11, released on 18/02/2026

End of support: 14/02/2026

No known vulnerability open in 5.6.11

Vulnerabilities in Contao 5.6

6 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.

CVE-2025-65960, CVSS 3.1: 6.6: fixed in 5.6.5
CVE-2025-57757, CVSS 3.1: 5.3: fixed in 5.6.1
CVE-2025-57756, CVSS 3.1: 5.3: fixed in 5.6.1
CVE-2025-65961, CVSS 3.1: 4.8: fixed in 5.6.5
CVE-2025-57759, CVSS 3.1: 4.3: fixed in 5.6.1
CVE-2025-57758, CVSS 3.1: 4.3: fixed in 5.6.1

Get notified

Add Contao with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.

Watch Contao 5.6

Already have an account? Log in and add Contao 5.6

All branches of Contao