Download Latest Version 7.1.3-update.zip (72.0 MB)
Email in envelope

Get an email when there's a new version of Mautic

Home / 6.0.9
Name Modified Size InfoDownloads / Week
Parent folder
6.0.9-update.zip 2026-05-28 68.0 MB
0
6.0.9.zip 2026-05-28 91.6 MB
0
Mautic Community 6.0.9 source code.tar.gz 2026-05-28 45.5 MB
0
Mautic Community 6.0.9 source code.zip 2026-05-28 48.5 MB
0
README.md 2026-05-28 1.7 kB
0
Totals: 5 Items   253.6 MB 0

Announcing Mautic 6.0.9

🔒 Security Release

This release addresses several security vulnerabilities. We strongly advise updating your installation at your earliest convenience after performing a full backup and testing the upgrade in a staging environment.

🔒 Security Fixes

  • CVE-2026-4776: SQL Injection in API Contact Filtering
  • Attribution: Reported by @Senku01 and @Harish4948. Fixed by @Senku01. Reviewed by @patrykgruszka.

  • Advisory: GHSA-fcmw-wx57-9p75

  • CVE-2026-9557: SSRF in the Mautic Focus Component

  • Attribution: Reported by @r1beirin and @dungNHVhust. Fixed by @patrykgruszka. Reviewed by @escopecz.

  • Advisory: GHSA-jmv8-8j9j-rcpc

  • CVE-2026-9558: Server-Side Template Injection (SSTI) in Theme Templates

  • Attribution: Reported by @onurcangnc, @xfer0, and @Entropt. Fixed by @onurcangnc. Reviewed by @escopecz and @patrykgruszka.
  • Advisory: GHSA-9fx4-7cmj-47vg

🤖 DevOps Updates

  • Update vulnerable Composer dependencies for 6.0 security phase (by @escopecz).

💡 Release Team & Sponsors

This release was made possible through the dedicated efforts of our community and supporters:

  • Release Leader: @patrykgruszka
  • Release Assistant: @escopecz
  • Sponsor: Special thanks to @leuchtfeuer for sponsoring this security release.

Package Checksums

SHA1(6.0.9.zip)= [9062b0] SHA1(6.0.9-update.zip)= [5af03f]

Source: README.md, updated 2026-05-28