On September 22, 2026, PHP released five versions simultaneously, including the feature-frozen 8.6.0 RC1, which serves as a preview for the next major version. The other releases, 8.5.11 and 8.4.26, include bug fixes and security patches, while 8.3.35 and 8.2.34 are dedicated solely to security updates. The updates address various vulnerabilities, and users of versions 8.2 through 8.5 are encouraged to upgrade to maintain security. PHP 8.6.0 RC1 introduces new features such as partial function application and a built-in clamp() function, while also announcing several deprecations that could lead to breaking changes in the future

PHP Releases Five Versions at Once, Includes 8.6.0 RC1 and 8.5.11

PHP shipped five coordinated releases on 22 September 2026, spanning every actively supported line plus the first candidate for the next major version. The headline is 8.6.0 RC1 from Matteo Beccati, a feature-frozen preview not meant for production. The other four are practical: 8.5.11 and 8.4.26 bundle bug fixes and security patches, while 8.3.35 and 8.2.34 are security-only updates. This cycle fixes a wide range of vulnerabilities, including a FastCGI ACL bypass, OpenSSL hostname-downgrade flaws, and a cross-origin credential leak, so running 8.2 through 8.5 should probably be on your list this week.

PHP Releases Five Versions at Once, Includes 8.6.0 RC1 and 8.5.11 @ Linux Compatible