What’s new in our latest release?

Matomo 5.14.2 is a patch release with an important security notice.

Important security update for our Matomo On-premise or self hosted users: On 21 October 2026, two critical vulnerabilities were disclosed in PHP, the technology Matomo runs on. Both are rated 9.2/10 in severity (CVE-2026-109618 and CVE-2026-109619). Updating Matomo alone will not apply these fixes. Read the Matomo security guidance for more information.

Update Matomo to the latest release

Database upgrade

This release does not contain any major database upgrade.

Need help upgrading Matomo?

Read the Updating Matomo user guide or for more help we offer paid support plans.

After you update

  • Please help us spread the word! Maybe you can write about the project on your blog, website, social media, get involved with MatomoCamp or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
  • Use the forums if you have any question or feedback (free support),
    or purchase a Support Plan to get professional support and guidance.
  • To improve Matomo in your language consider contributing to translations.
  • You can also support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Tickets closed in Matomo 5.14.2

Security

  • #25563 Update composer/ca-bundle to 1.6.0. [by sgiehl]
  • #25566 Urgent Core release: warn On-Premise users running affected PHP versions [by chippison]