PHP 8.2 leaves security support on 31 December 2026.
PHP 8.2 has been on security fixes only since 31 December 2024. The PHP project’s calendar ends that support on 31 December 2026.
What the calendar says
PHP publishes the dates on its supported-versions page. The 8.2 branch was first released on 8 December 2022. Active support ran until 31 December 2024. Security support runs until 31 December 2026.
During those security-only years, the project ships fixes for critical security issues, and only when it needs to. Once the branch reaches end of life, PHP no longer supports it.
What that means for a live site
A site still answering on PHP 8.2 will not receive further security releases from php.net for that branch after 31 December 2026. The same table lists 8.3, 8.4 and 8.5 with security support beyond that date.
A host or a Linux vendor may ship its own packages. Whether those packages continue after php.net stops is a question for whoever runs the server. The version string on its own does not answer it.
What to settle before the year ends
Name the PHP version that answers requests for the site. If it is 8.2, the work is a planned move onto a branch the PHP project still supports, with time to check the pages, forms and uploads people actually use.
If nobody can name the version, that is the first thing to find out. Maintenance for one live site starts at £120 a month. A move between PHP branches is scoped before it starts.
Source: PHP supported versions