Magento 2 Release Schedule 2026: All Patches, Versions, and Dates
[Updated: March 27, 2026]
Adobe changed how Magento patches ship in 2026. Monthly isolated security fixes replace the old quarterly cycle. Version 2.4.9 enters beta. Version 2.4.6 hits end of life in August.
This guide covers every date, version, and deadline you need for 2026.
Key Takeaways
- Adobe released 2.4.8-p4, 2.4.7-p9, and 2.4.6-p14 on March 10, 2026
- Magento 2.4.9-beta1 launched March 10, 2026, with GA expected May 2026
- 2.4.9 brings PHP 8.5, HugeRTE (replaces TinyMCE), and Symfony Cache
- 2.4.6 reaches end of support on August 11, 2026
- New cadence: monthly isolated security patches, one major release per year (May), two aggregated patches (May + November)
Quick Answer
Magento 2 release schedule 2026 = Adobe ships monthly isolated security patches, one major version (2.4.9) in May, and aggregated security patches in May and November. The next patch after 2.4.8-p4 (March 2026) arrives in May 2026 alongside the 2.4.9 GA release.
Check now: Is your store on 2.4.6? Upgrade before August 11, 2026 (end of support).
Current Release Status (March 2026)
Adobe released three security patches and one beta on March 10, 2026:
| Release | Date | Key Changes |
|---|---|---|
| 2.4.9-beta1 | March 10, 2026 | PHP 8.5, HugeRTE, Symfony Cache, 560+ fixes |
| 2.4.8-p4 | March 10, 2026 | Security fixes for 2.4.8 line |
| 2.4.7-p9 | March 10, 2026 | Security fixes for 2.4.7 line |
| 2.4.6-p14 | March 10, 2026 | Final patches before August EOL |
The 2.4.8-p4 patch is the current recommended version for production stores. Stores still on 2.4.6 should plan their upgrade path before August.
New 2026 Release Cadence
Adobe restructured how patches ship starting January 2026. The old quarterly model is gone.
| Type | Frequency | When | What |
|---|---|---|---|
| Isolated security fixes | Monthly (as needed) | Any month | Single-issue CVE patches |
| Major feature release | Once per year | May | New version (2.4.9) |
| Aggregated security patches | Twice per year | May + November | Bundled security fixes (-p versions) |
| Beta releases | Twice per year | March + November | Pre-release testing |
This change means stores get critical security patches faster. No more waiting 3 months for the next quarterly window.
2026 Release Calendar
| Month | Release | Versions Covered |
|---|---|---|
| January | Isolated security fixes (as needed) | 2.4.6, 2.4.7, 2.4.8 |
| February | Isolated security fixes (as needed) | 2.4.6, 2.4.7, 2.4.8 |
| March | 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.9-beta1 | All supported lines |
| May | 2.4.9 GA + aggregated security patches | 2.4.7, 2.4.8, 2.4.9 |
| June | Isolated security fixes (as needed) | 2.4.7, 2.4.8, 2.4.9 |
| August | 2.4.6 end of support | 2.4.6 loses all updates |
| September | Isolated security fixes (as needed) | 2.4.7, 2.4.8, 2.4.9 |
| November | Aggregated security patches + 2.4.10 beta | 2.4.7, 2.4.8, 2.4.9 |
After August 2026, version 2.4.6 receives no more patches. Stores on 2.4.6 face unpatched vulnerabilities.
Magento 2.4.9: What Changes
The 2.4.9 beta brings the biggest framework changes since 2.4.0. Three core components get replaced.
Framework Replacements
| Old Component | New Component | Why |
|---|---|---|
| Laminas MVC | Native PHP MVC | Lighter framework, faster boot time |
| TinyMCE | HugeRTE | Modern editor, better admin experience |
| Zend_Cache | Symfony Cache | Active maintenance, PSR-6/16 compliant |
System Requirements (2.4.9)
| Component | Required | Dropped |
|---|---|---|
| PHP | 8.3, 8.4, 8.5 | PHP 8.2 no longer supported |
| MySQL | 8.4 LTS | MySQL 8.0 dropped |
| MariaDB | 11.4 | MariaDB 10.6 dropped |
| OpenSearch | 3.x | — |
| Valkey | 8.x | Redis still supported |
| Message Queue | Apache ActiveMQ Artemis | RabbitMQ still supported |
Check your current Magento system requirements before planning an upgrade to 2.4.9.
Additional 2.4.9 Features
- 560+ bug fixes and quality improvements
- PHP 8.5 support with fibers and improved async
- Native PHP MVC reduces dependency overhead
- Symfony Cache brings PSR-6 and PSR-16 compliance
- HugeRTE provides a modern WYSIWYG for CMS pages and product descriptions
Version Support Timeline
Every Magento 2.4.x version gets three years of support from its GA date.
| Version | GA Date | End of Support | Status (March 2026) |
|---|---|---|---|
| 2.4.4 | April 12, 2022 | April 24, 2025 | EOL |
| 2.4.5 | August 9, 2022 | August 9, 2025 | EOL |
| 2.4.6 | March 14, 2023 | August 11, 2026 | Active (5 months left) |
| 2.4.7 | April 9, 2024 | April 9, 2027 | Active |
| 2.4.8 | April 8, 2025 | April 11, 2028 | Active (recommended) |
| 2.4.9 | May 2026 (expected) | May 2029 (expected) | Beta |
Stores on 2.4.4 or 2.4.5 run without security updates. Upgrade is urgent.
Complete Patch History (2.4.8 Line)
| Patch | Release Date | Scope |
|---|---|---|
| 2.4.8 | April 8, 2025 | GA release, PHP 8.4, Monolog 3, 497 fixes |
| 2.4.8-p1 | June 10, 2025 | Security patch |
| 2.4.8-p2 | August 12, 2025 | Security patch |
| 2.4.8-p3 | October 14, 2025 | Security patch |
| 2.4.8-p4 | March 10, 2026 | Security patch (current) |
Each patch addresses CVEs discovered since the previous release. Install patches within 30 days of release to stay within Adobe's security SLA.
PHP Version Compatibility Matrix
| Magento Version | PHP 8.1 | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|---|
| 2.4.6 | ✓ | ✓ | — | — | — |
| 2.4.7 | ✓ (upgrade) | ✓ | ✓ | — | — |
| 2.4.8 | — | — | ✓ | ✓ | — |
| 2.4.9 | — | — | ✓ | ✓ | ✓ |
PHP 8.4 is the recommended version for production stores on 2.4.8. PHP 8.5 requires 2.4.9.
How to Apply Security Patches
Before Patching
- Create a full database and file backup
- Clone your production environment to staging
- Read the patch release notes for breaking changes
- Check extension compatibility with the target version
Patch Application
# Update Magento via Composer
composer require magento/product-community-edition=2.4.8-p4 --no-update
composer update
bin/magento setup:upgrade
bin/magento setup:di:compile
bin/magento setup:static-content:deploy -f
bin/magento cache:clean
After Patching
- Run full test suite on staging
- Verify checkout, payment, and shipping flows
- Check third-party extension functionality
- Apply to production during low-traffic hours
- Monitor error logs for 24 hours after deployment
Upgrade Planning for 2.4.6 Stores
August 11, 2026 is the deadline. After that date, Adobe stops all patches for 2.4.6.
Recommended Upgrade Paths
| Current Version | Target | Effort |
|---|---|---|
| 2.4.6-p14 | 2.4.8-p4 | Medium (skip 2.4.7, go direct) |
| 2.4.6-p14 | 2.4.9 (after May GA) | Higher (new framework components) |
| 2.4.7-p9 | 2.4.8-p4 | Low (minor version jump) |
For stores on managed Magento hosting, your provider handles patch application and compatibility testing. Self-hosted stores need their own upgrade plan and staging environment.
Timeline
Start planning now. A typical upgrade from 2.4.6 to 2.4.8 takes 2-6 weeks including extension testing. Waiting until July leaves no margin for issues.
FAQ
When does Magento 2.4.9 release?
The 2.4.9-beta1 launched March 10, 2026. Adobe expects the GA (General Availability) release in May 2026. Beta versions are for staging testing and extension compatibility checks. Do not deploy beta to production.
Is Magento 2.4.6 still supported?
Yes, until August 11, 2026. After that date, Adobe provides no more security patches or bug fixes. Stores on 2.4.6 must upgrade to 2.4.7 or 2.4.8 before August to maintain security coverage.
How often do security patches release in 2026?
Adobe now releases isolated security fixes monthly (as needed) plus two aggregated patch bundles per year (May and November). This replaces the old quarterly cycle and delivers critical fixes faster.
What PHP version does Magento 2.4.8 need?
Magento 2.4.8 supports PHP 8.3 and PHP 8.4. PHP 8.4 is the recommended version for production. PHP 8.2 and older are not supported on 2.4.8.
Can I skip from 2.4.6 to 2.4.8?
Yes. Adobe supports direct upgrades from 2.4.6 to 2.4.8. You do not need to install 2.4.7 first. Test all extensions on staging before applying to production.
What replaces TinyMCE in 2.4.9?
HugeRTE replaces TinyMCE as the admin WYSIWYG editor starting in 2.4.9. It is a modern, maintained editor with better performance. Extensions that customize TinyMCE need updates for 2.4.9 compatibility.
Does 2.4.9 drop MySQL 8.0?
Yes. Magento 2.4.9 requires MySQL 8.4 LTS or MariaDB 11.4. MySQL 8.0 and MariaDB 10.6 are no longer supported. Plan your database upgrade alongside the Magento upgrade.
What is an isolated security fix?
It is a patch that addresses a single CVE (security vulnerability) without bundling other changes. Adobe releases these monthly as needed. They are smaller and less risky to apply than aggregated patches.
How long is 2.4.8 supported?
Regular support for 2.4.8 ends April 11, 2028. That gives stores three years from the April 8, 2025 GA date. Security patches will continue through that date.
Should I upgrade to 2.4.9 or stay on 2.4.8?
Stay on 2.4.8 until 2.4.9 GA releases in May 2026 and extensions confirm compatibility. Early adoption of .0 releases carries risk. Wait for the first patch (2.4.9-p1) before upgrading production stores.
Conclusion
The 2026 Magento release schedule brings faster security patches and a major version upgrade. The three critical dates are: 2.4.9 GA in May, 2.4.6 end of life in August, and aggregated patches in November.
Stay current with patches by upgrading to 2.4.8-p4 now. Plan your 2.4.9 migration for Q3 2026. For stores that want patches applied without downtime, Magento managed hosting handles upgrades, testing, and deployment as part of the service.
