Is Concrete CMS 5.6.4.0 patched?
Current stable (9.5.5): 100/100
5.6.4.0 has 12 open critical-or-high vulnerabilities. Run 9.5.4 or later to clear them. See what 9.5.4 fixes →
Summary iPlain-English security status for Concrete CMS 5.6.4.0, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Concrete CMS 5.6.4.0 is part of the 5.6 release line. 56 known vulnerabilities affect it. The minimum safe version is 9.5.4 — upgrade to it or later to clear the open critical/high issues. The 5.6 line reached end-of-life on 2019-02-26, so it no longer receives security patches. The latest supported Concrete CMS release is 9.5.5.
Known issues affecting 5.6.4.0
Exploited first, then by exploitation probability.
CVE-2026-8134 HIGH EPSS 1% → see advisory CVE-2026-8135 HIGH EPSS 0% → see advisory CVE-2026-81915 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-85385 CRITICAL EPSS 0% → fixed in 9.5.4 CVE-2026-18422 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-81925 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-85386 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-18111 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-81917 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-81927 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-18119 CRITICAL EPSS 0% → fixed in 9.5.3 CVE-2026-81918 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-81895 HIGH EPSS 0% → fixed in 9.5.3 CVE-2026-8350 HIGH EPSS 0% → see advisory CVE-2026-81907 HIGH EPSS 0% → fixed in 9.5.3 CVE-2026-7886 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-81916 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-18120 MEDIUM EPSS 0% → fixed in 9.5.4 CVE-2026-81900 MEDIUM EPSS 0% → fixed in 9.5.3 CVE-2026-6826 MEDIUM EPSS 0% → fixed in 9.5.1Other Concrete CMS versions
Check another release line of Concrete CMS.
Frequently asked
Is Concrete CMS 5.6.4.0 patched?
Concrete CMS 5.6.4.0 is end-of-life and no longer receives security patches. Move to 9.5.5.
What version should I upgrade Concrete CMS 5.6.4.0 to?
Upgrade Concrete CMS 5.6.4.0 to at least 9.5.4 to clear its 12 open critical-or-high vulnerabilities.
When does Concrete CMS 5.6 reach end-of-life?
Concrete CMS 5.6 reached end-of-life on 2019-02-26 and no longer receives security patches.
What is the latest version of Concrete CMS?
The latest supported Concrete CMS release is 9.5.5.
Is Concrete CMS 5.6.4.0 still receiving security updates?
No — Concrete CMS 5.6.4.0 is on the 5.6 line, which reached end-of-life on 2019-02-26 and no longer receives security updates. Upgrade to 9.5.5 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Concrete CMS's official advisory before you patch or upgrade — Concrete CMS official site ↗