PHP Version Check
Two critical PHP flaws (PHP2Shell) were fixed on 21 Oct 2026, and PHP 8.2 stops getting security fixes on 31 Dec 2026. Enter your versions to see if your Dolibarr server is safe and how to upgrade it.
Your results
Want us to do it for you?
We patch PHP and upgrade Dolibarr safely, with a full backup and a test copy first. We also build AI add-ons for Dolibarr. Leave your email and we reply within one business day.
Using Dolibarr every day? See Doli Brain, an AI analyst that answers questions from your Dolibarr data.
Questions
What is PHP2Shell?
Two critical PHP bugs (CVE-2026-109618 and CVE-2026-109619) that can let an attacker run code on a server without logging in. Apache with mod_php is the most exposed setup. They are fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12.
My PHP comes from Debian, Ubuntu or Red Hat packages. Is the version number enough?
No. These distributions often add security fixes without changing the main version number (for example 8.2.20-1+deb12u5). Check your distribution's security notice for these CVEs, then run your normal package update.
Can I jump straight to the latest Dolibarr?
Usually yes, but the upgrade wizard runs the database changes one major version at a time, and each Dolibarr version only runs on certain PHP versions. Back up the database and the documents folder first, and test on a copy.
Do you store what I enter?
No. The check runs in your browser. Nothing is sent unless you fill in the email form.
Data last checked: 22 Oct 2026. Sources: PHP Foundation, php.net supported versions, Dolibarr releases.