Download Latest Version 7.1.3-update.zip (72.0 MB)
Email in envelope

Get an email when there's a new version of Mautic

Home / 5.2.11
Name Modified Size InfoDownloads / Week
Parent folder
5.2.11-update.zip 2026-05-28 52.9 MB
0
5.2.11.zip 2026-05-28 76.3 MB
0
Mautic Community 5.2.11 source code.tar.gz 2026-05-28 33.5 MB
0
Mautic Community 5.2.11 source code.zip 2026-05-28 36.6 MB
0
README.md 2026-05-28 1.8 kB
0
Totals: 5 Items   199.3 MB 0

Announcing Mautic 5.2.11: Capella Edition

🔒 Security Release

This release addresses several security vulnerabilities. We strongly advise updating your installation at your earliest convenience after performing a full backup and testing the upgrade in a staging environment.

🔒 Security Fixes

  • CVE-2026-4776: SQL Injection in API Contact Filtering
  • Attribution: Reported by @Senku01 and @Harish4948. Fixed by @Senku01. Reviewed by @patrykgruszka.

  • Advisory: GHSA-fcmw-wx57-9p75

  • CVE-2026-9557: SSRF in the Mautic Focus Component

  • Attribution: Reported by @r1beirin and @dungNHVhust. Fixed by @patrykgruszka. Reviewed by @escopecz.

  • Advisory: GHSA-jmv8-8j9j-rcpc

  • CVE-2026-9558: Server-Side Template Injection (SSTI) in Theme Templates

  • Attribution: Reported by @onurcangnc, @xfer0, and @Entropt. Fixed by @onurcangnc. Reviewed by @escopecz and @patrykgruszka.
  • Advisory: GHSA-9fx4-7cmj-47vg

🤖 DevOps Updates

  • Refresh Symfony 5.4 components to latest security patch levels (by @escopecz).
  • Update vulnerable Composer dependencies for the 5.2 security phase (by @escopecz).

💡 Release Team & Sponsors

This release was made possible through the dedicated efforts of our community and supporters:

  • Release Leader: @patrykgruszka
  • Release Assistant: @escopecz
  • Sponsor: Special thanks to @leuchtfeuer for sponsoring this security release.

Package Checksums

SHA1(5.2.11.zip)= [b0874d] SHA1(5.2.11-update.zip)= [da58e7]

Source: README.md, updated 2026-05-28