PHP2Shell CVE-2026-109618 / 109619 · WordPress and Drupal hosts should update PHP now.

Patch guide for your host
DrupalMigration.aiPatch tonight. Migrate to modern, AI-improved.

Patch tonight. Migrate to modern, AI-improved.

Drupal end-of-life dates

Last updated: 2026-10-23 · Shawn Gants

  1. Jan 2025

    Drupal 7 ended

    Passed

  2. Oct 21, 2026

    PHP2Shell patches

    Passed

  3. Dec 9, 2026

    Drupal 10 ends

    Ahead

  4. Dec 31, 2026

    PHP 8.2 security ends

    Ahead

Published dates only. Drupal 7 ended in January 2025. PHP2Shell patches shipped October 21, 2026. Drupal 10 ends December 9, 2026. PHP 8.2 security support ends December 31, 2026.
Drupal 7 reached end of life in January 2025. Drupal 10 reaches end of life on December 9, 2026. Drupal 12.0.0 releases the week of December 7, 2026. These are Drupal.org dates, not estimates.
FactDateSource
Drupal 7 end of lifeJanuary 2025Drupal.org PSA-2025-01-06
Drupal 12.0.0Week of December 7, 2026Drupal core release schedule
Drupal 10 end of lifeDecember 9, 2026Drupal core release schedule
Acquia Drupal 10 support endsDecember 9, 2026Acquia

How many sites report each line

Week of October 11, 2026, counting only sites that report through the Update Status module, so this is an undercount (Drupal.org usage):

LineReported sites
Drupal 10.xabout 276,475
Drupal 8.x and 9.x (already end of life)about 93,650
Drupal 11.xabout 275,456

Options for a Drupal 10 site are on the Drupal 10 page. Drupal 7 options are on the Drupal 7 page.

Sources on this page

  1. S15: Drupal core release schedule (Drupal 10 EOL Dec 9, 2026; Drupal 12 week of Dec 7, 2026) — verified (search extract)
  2. S16: Acquia: Drupal 10.x End-Of-Life FAQs — verified (search extract)
  3. S17: Drupal.org: Drupal 7 has reached end of life | PSA-2025-01-06
  4. S19: Drupal.org: Usage statistics for Drupal core