Publicado
2026-08-05 14:00
There has been a security release for CiviCRM. Upgrades are available for:
- CiviCRM v6.17.0 (download, release notes)
- CiviCRM v6.16.4 (download, release notes)
- CiviCRM v6.10 ESR (info, download, release notes)
These upgrades address the following security issues:
- CIVI-SA-2026-35: Permission Bypass in APIv4 - Highly Critical (read the advisory for a hotfix if you cannot upgrade)
- CIVI-SA-2026-36: Information disclosure in APIv4 - Moderately Critical
Learn more about subscribing to Extended Security Releases (ESR).
Support CiviCRM
We are committed to keeping CiviCRM free and open, forever. We depend on your support to help make that happen.
- Make a donation or contribute to a Make it happen campaign.
- If your organization wants to support our work, please become a member today.
- If you are a CiviCRM service provider, please become a partner.
CiviCRM is community driven and is sustained through contributions, good vibes, solidarity, and financial support from its community. Help CiviCRM do a world of good.
Filed under
