diff --git a/modules/ROOT/pages/7.9.4-release-notes.adoc b/modules/ROOT/pages/7.9.4-release-notes.adoc
index 1eda154d14..6b6d1ce6d2 100644
--- a/modules/ROOT/pages/7.9.4-release-notes.adoc
+++ b/modules/ROOT/pages/7.9.4-release-notes.adoc
@@ -15,6 +15,8 @@ include::partial$misc/admon-releasenotes-for-stable.adoc[]
 
 * xref:security-fixes[Security fixes]
 
+IMPORTANT: {productname} {release-version} is a commercial-only release. It is available to commercial customers through the customer portal and {cloudname}, and is not published to npm or other community package managers. To receive this security fix in the community version of {productname}, upgrade to {productname} 8. For upgrade steps, see https://www.tiny.cloud/docs/tinymce/latest/migration-from-7x/[Migrating from {productname} 7].
+
 
 [[security-fixes]]
 == Security fixes
diff --git a/modules/ROOT/pages/changelog.adoc b/modules/ROOT/pages/changelog.adoc
index 3303c7a971..17e41ffc12 100644
--- a/modules/ROOT/pages/changelog.adoc
+++ b/modules/ROOT/pages/changelog.adoc
@@ -6,6 +6,8 @@ NOTE: This is the {productname} Community version changelog. For information abo
 
 == xref:7.9.4-release-notes.adoc[7.9.4 - 2026-10-06]
 
+IMPORTANT: {productname} 7.9.4 is a commercial-only release. It is available to commercial customers through the customer portal and {cloudname}, and is not published to npm or other community package managers. To receive this security fix in the community version of {productname}, upgrade to {productname} 8. For upgrade steps, see https://www.tiny.cloud/docs/tinymce/latest/migration-from-7x/[Migrating from {productname} 7].
+
 === Security
 
 * Fixed stored XSS vulnerability using media plugin `data-mce-object` serialization.