Magento End of Support: Which Versions Are Still Safe in 2027?
by Rahul Basu
November 4,2026
Ask most shop owners which Magento version they run and you'll usually get a shrug. They find out when something breaks. In 2026 that approach started costing real money. Adobe changed how it releases updates, began shipping security fixes every month, and said it can take unsupported Adobe Commerce Cloud stores offline from June 2027.
If you run a small or mid-sized business, the version number now affects decisions well outside IT. It can decide whether you pass a PCI review, whether your ERP connection survives the next patch, and how much you need to set aside for 2027. Below we go through where each Magento 2.4 version stands and what we'd recommend doing about it.
Which Magento versions are still supported?
Adobe supports every 2.4.x release for three years, counted from its launch date. If you're on Adobe Commerce, some older versions get a little longer, though only for security fixes. The table shows where each version stood in November 2026, based on Adobe's lifecycle policy.
| Version |
Released |
Standard support ends |
Extra time (Adobe Commerce only) |
Status in Nov 2026 |
| 2.4.9 |
May 2026 |
31 May 2029 |
Not yet announced |
Current, fully supported |
| 2.4.8 |
April 2025 |
31 May 2028 |
Not yet announced |
Fully supported |
| 2.4.7 |
April 2024 |
31 May 2027 |
Extended support to 31 May 2028 |
Supported, plan upgrade for 2027 |
| 2.4.6 |
March 2023 |
Ended 11 Aug 2026 |
Extended to 31 Aug 2027, security-only to 31 May 2028 |
Extended support only |
| 2.4.5 |
August 2022 |
Ended Aug 2025 |
Security-only to 31 May 2027 |
Critical fixes only |
| 2.4.4 |
April 2022 |
Ended April 2025 |
Security-only to 31 May 2027 |
Critical fixes only |
| 2.4.0–2.4.3, Magento 1 |
2020 and earlier |
Ended |
None |
Unsupported, migrate now |
On Magento Open Source? Be careful with the extra time in the table. Adobe describes the extended and security-only periods for Adobe Commerce customers, and its 2026 security bulletins only covered Open Source versions 2.4.6 to 2.4.9. We'd plan around the standard support date and leave it at that.
Don't know your version? Look at the footer of the Magento admin, or ask your developer to run bin/magento --version on the server.
What does "end of support" mean in practice?
Nothing happens to your shop on the day support ends. It keeps running. What stops is the fixes, and over time that turns into four problems for the business, not just for whoever looks after the server.
- Security holes stay open. Vulnerabilities found after the deadline don't get patched on your version. Adobe's 2026 bulletins show why that matters. In July it fixed a webhook flaw that let attackers run code without logging in, and in September it pushed out an emergency hotfix for a zero-day that was already being exploited.
- Audits get harder. Taking card payments brings PCI DSS into play, and PCI expects software that is supported and patched. GDPR Article 32 also asks you to protect customer data with appropriate technical measures. An unpatched shop is hard to defend in either review, and cyber insurers ask about it more and more.
- PHP has its own deadlines. PHP 8.1 reached end of life on 31 December 2025 and PHP 8.2 follows on 31 December 2026. A 2.4.6 store on PHP 8.2 therefore hits two deadlines a few weeks apart. Magento 2.4.9, by comparison, runs on PHP 8.5.
- Cloud stores can be switched off. From 1 June 2027, Adobe will stop maintaining Adobe Commerce Cloud environments on unsupported versions and may suspend their traffic. For 2.4.4 and 2.4.5 that date is 1 June 2027. For 2.4.6 and 2.4.7 it's 1 June 2028.
One more thing tends to catch people out. Extension vendors and integration partners gradually stop testing against old versions. Then one day your payment module or ERP connector gets an update and simply stops working on your release.
How often does Adobe patch Magento now?
Adobe moved to a fixed schedule in 2026. A major release comes out each May. Bundled security patches, the versions ending in "-p", follow in May and November. Smaller, isolated security fixes can appear on the second Tuesday of any month, and a critical hotfix can come out on any day.
So patching is now a monthly job rather than a yearly one. A simple routine looks like this:
- On the second Tuesday of each month, read Adobe's security bulletin.
- Install the fixes that apply to you on a staging copy of the shop, not the live site.
- Test the parts that make money: checkout, payment, customer login and B2B quotes.
- Test every integration, above all the order export to your ERP.
- Go live, then write down the patch level, the date and who did it.
Step 4 is the one SMEs skip most often. When the shop is connected to SAP Business One, a core patch can change how an API behaves, and the connector depends on that behaviour. After every update, place a test order and check that it reaches the ERP and that stock levels and customer prices come back correctly. Glancing at the storefront won't tell you that.
The next bundled patch, 2.4.9-p1, is due this month (November 2026). If you're already on 2.4.9, book a short test window for it now.
Patch, upgrade or rebuild?
Your version number matters less than what has been built on top of it, meaning custom code and extensions. Use the table as a rough guide and adjust it to your own setup.
| If you run |
Do this |
When |
| 2.4.9 |
Apply the monthly fixes and install 2.4.9-p1 |
Ongoing |
| 2.4.8 |
Keep patching and plan the move to 2.4.9 |
Plan in H1 2027 |
| 2.4.7 |
Move to 2.4.9 before standard support ends |
Start Q1 2027, finish before 31 May 2027 |
| 2.4.6 |
Upgrade now, and sort out PHP 8.2 first |
Q4 2026 – Q1 2027 |
| 2.4.4 or 2.4.5 |
Get quotes for both an upgrade and a rebuild |
Finish before 31 May 2027 |
| 2.4.3 or older, Magento 1 |
Plan a full replatform |
Start immediately |
When is a rebuild the better choice? Look at it seriously if your theme is a heavily customised Luma, if half your extensions are no longer maintained, or if the upgrade quote comes close to the price of a new build. Hyvä has been free and open source since November 2025, so a fast, modern frontend costs far less than it used to. A rebuild is also a good chance to tidy up the ERP integration instead of dragging old workarounds into the new shop.
What makes an upgrade expensive? In the projects we've worked on, it usually comes down to three things:
- Third-party extensions: every one has to be checked against 2.4.9 and PHP 8.5. Version 2.4.9 replaced several framework components, so older modules break more often than you'd expect.
- Custom modules: code written for earlier versions may need reworking.
- Integrations: ERP, payment, shipping and PIM connections all need a full round of regression testing.
Get a free Magento version check
Not sure how close you are to a deadline? Ingold Solutions will check your Magento version, PHP runtime, extensions and SAP Business One integration, then give you a clear upgrade path and a fixed quote. As an Adobe Solution Partner and SAP Partner, we handle the shop upgrade and the ERP connection in one project, so the two keep working together.
