Synced 08 Oct 2026 18:41 UTC Account

Is CakePHP 4.0.10 patched?

Cake Software Foundation · cycle 4.0 · end of life · Official site ↗
4.0.1040/100End of life

Current stable (5.3.6): 100/100

Health score40/100
Open issues1
Exploited now0
Cycle 4.0 EOL—
Latest release5.3.6

Summary iPlain-English security status for CakePHP 4.0.10, built from its CVEs, active-exploitation data, end-of-life date and latest release.

CakePHP 4.0.10 is part of the 4.0 release line. 1 known vulnerability affects it. The latest supported CakePHP release is 5.3.6.

Known issues affecting 4.0.10

Exploited first, then by exploitation probability.

CVE-2026-55590 MEDIUM EPSS 1% → fixed in 4.1.1

Other CakePHP versions

Check another release line of CakePHP.

CakePHP 5.3.6CakePHP 5.2.13CakePHP 5.1.7CakePHP 5.0.11CakePHP 4.6.4CakePHP 4.5.11CakePHP 4.4.18CakePHP 4.3.11CakePHP 4.2.12CakePHP 4.1.7CakePHP 3.10.5CakePHP 3.9.10CakePHP 3.8.13CakePHP 3.7.9CakePHP 3.6.15CakePHP 3.5.18CakePHP 3.4.14CakePHP 3.3.16CakePHP 3.2.14CakePHP 3.1.14CakePHP 3.0.19CakePHP 2.10.24CakePHP 2.9.9CakePHP 2.8.9CakePHP 2.7.11CakePHP 2.6.13CakePHP 2.5.9CakePHP 2.4.10CakePHP 2.3.10CakePHP 2.2.9CakePHP 2.1.5CakePHP 2.0.6CakePHP 1.3.21

Frequently asked

Is CakePHP 4.0.10 patched?

CakePHP 4.0.10 is end-of-life and no longer receives security patches. Move to 5.3.6.

What is the latest version of CakePHP?

The latest supported CakePHP release is 5.3.6.

Is CakePHP 4.0.10 still receiving security updates?

No — CakePHP 4.0.10 is on the 4.0 line, which reached end-of-life and no longer receives security updates. Upgrade to 5.3.6 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Cake Software Foundation's official advisory before you patch or upgrade — CakePHP official site ↗