Joomla 3.9.26 Vulnerability Type : Unpatched Joomla! server

[fc338339]

Dear

Our Joomla version is 3.9.26. Due to our institution's server setting we can only apply the php version up to 5.6

Below image is the system information about our testing site

Recently we receive a scanning report and find a Vulnerability Type : "Unpatched Joomla! server"
Description of Vulnerability:
The use of unpatched version of Joomla! server may be susceptible to the risk posed by the following known vulnerabilities.

CVE-2021-26032, CVE-2021-26033, CVE-2021-26034, CVE-2021-26035, CVE-2021-26036, CVE-2021-26037, CVE-2021-26038, CVE-2021-26039

Suggested Actions:
It is recommended to upgrade the Joomla! server to the latest version to patch the vulnerabilities.

My Question :
Is there any Joomla 3.x version we can upgrade (under php 5.6) to solve this vulnerability ?

Thanks for your kind attention

Fion

[toivo]

The minimum PHP version for Joomla 3.10.11 is PHP 5.3.10. Therefore you should be able to update the site to the latest Joomla 3.x version while still using PHP 5.6.

It is best to test the update first in an off-line development environment, for example using Wampserver in a Windows workstation. It is possible to install different versions of PHP to Wampserver as addons and switch between them while testing.

In the medium term, the institution should consider updating the web server so that it can run supported versions of PHP, starting with PHP 8.1.

Ref. Technical Requirements - Requirements for Joomla! 3.x