PHP 8.2 End of Life Date: December 31, 2026 — What You Need to Know

Updated: May 24, 2026 Security only — 220 days remaining
Dec 31, 2026
PHP 8.2 official end of life
~220 days remaining

PHP 8.2 is currently in security-only support. Active support ended December 8, 2024. You are receiving critical CVE patches only until December 31, 2026 — after which PHP 8.2 receives nothing. If your application depends on PHP 8.2, migration or an extended support contract needs to start now.

PHP 8.2 lifecycle dates

Active support
Nov 2022 – Dec 2024
Security only
Dec 2024 – Dec 2026
EOL
Dec 31, 2026 ✕
PhaseDateStatus
Initial releaseNovember 8, 2022Released
Active support endsDecember 8, 2024Passed
Security support ends (EOL)December 31, 2026Upcoming

Is PHP 8.2 still supported?

PHP 8.2 is still receiving security patches in 2026 — but only security patches. The PHP project entered security-only maintenance on December 8, 2024. This means:

For most production environments, being on security-only support is acceptable — but the hard deadline of December 31, 2026 means migration work needs to begin in mid-2026 at the latest.

What PHP version should you migrate to?

PHP 8.3 is the primary recommended migration target. Active support runs until December 2026, with security support extending to December 31, 2027. Migration from PHP 8.2 to 8.3 is typically low-friction — no major breaking changes affect most applications.

PHP 8.4, released November 2024, is also a valid target if you want to stay current longer. Active support runs to November 2026, with security support through November 30, 2027.

Avoid migrating to PHP 8.1 — it reached end of life on December 31, 2025 and is already unsupported.

Which vendors offer extended support for PHP 8.2 after EOL?

If migration cannot be completed before December 31, 2026, commercial vendors offer extended CVE patching and compliance coverage:

Third-Party ELS Vendors

Extended Lifecycle Support

Specialist ELS vendors provide continued CVE patching for PHP after official EOL — typically covering PHP 8.2, 8.1, 7.4, and earlier versions. Multi-year contracts available, commonly at a CVSS 7+ threshold.

View via endoflife.ai →

Check your PHP exposure alongside other EOL components

See the full CVE risk profile for PHP 8.2 and every other EOL component in your stack.

PHP 8.2 Risk Score →

Frequently asked questions

When is PHP 8.2 end of life?
PHP 8.2 reaches its official end of life on December 31, 2026. Active support ended December 8, 2024. It is currently in security-only maintenance. After December 31, 2026, no patches of any kind will be released.
Is PHP 8.2 still supported in 2026?
Yes — PHP 8.2 receives security patches only through December 31, 2026. Only high and critical CVEs are patched. After that date, all support ends permanently.
What is the PHP 8.2 end of life date?
December 31, 2026 is the PHP 8.2 EOL date — the last day any patch will be released. This is the date after which running PHP 8.2 means running permanently unpatched software.
What PHP version should I upgrade to from PHP 8.2?
PHP 8.3 is the recommended target — security support runs until December 31, 2027. PHP 8.4 is also a valid option. Both offer minimal breaking changes from PHP 8.2. Avoid PHP 8.1, which is already end of life.
Which vendors offer extended support for PHP 8.2 after EOL?
Commercial vendors offer extended lifecycle support for PHP 8.2 past December 31, 2026. Each provides ongoing CVE patching and compliance documentation for organizations that cannot migrate immediately.
What happens if I keep running PHP 8.2 after end of life?
After December 31, 2026, any vulnerability discovered in PHP 8.2 will never be patched. This creates permanent, accumulating exploit paths in your production environment. For regulated environments (PCI DSS, HIPAA, SOC 2), running EOL PHP creates immediate compliance gaps.

Related pages