Built on the endoflife.date open dataset
End-of-life intelligence
for every major stack.
endoflife.ai is a free public platform for software end-of-life intelligence, built on top of the endoflife.date open dataset. Paste your package.json or requirements.txt and get an EOL risk verdict for your whole stack — or check a single product. Instant and free.
Data reconciled from official vendor lifecycle pages, endoflife.date, NVD and CISA KEV — every date carries its source. How we source data →
600+
Products Indexed
13,000+
Pages & Score Cards
<7
Days to Exploit a New CVE
$0
Cost to Check
Listed in the Datadog, Red Hat and Tenable catalogs — free to check, no account required · production API keys from $89/mo →
600+
Products Tracked
<7
Days to Exploit a New CVE
8,000+
Pages & Score Cards
$0
Cost Forever
Windows 10 — EOL Oct 2025
CentOS 7 — EOL Jun 2024
AngularJS — EOL Dec 2021
MySQL 5.7 — EOL Oct 2023
PHP 8.1 — EOL Dec 2025
Node.js 20 — EOL Apr 2026
MySQL 8.0 — EOL Apr 2026
Python 3.10 — EOL Oct 2026
PostgreSQL 14 — EOL Nov 2026
PHP 8.2 — EOL Dec 2026
Python 3.13 — Supported
Node.js 22 LTS — Supported
PostgreSQL 17 — Supported
Ubuntu 24.04 LTS — Supported
Kubernetes 1.33 — Supported
Windows 10 — EOL Oct 2025
CentOS 7 — EOL Jun 2024
AngularJS — EOL Dec 2021
MySQL 5.7 — EOL Oct 2023
PHP 8.1 — EOL Dec 2025
Node.js 20 — EOL Apr 2026
MySQL 8.0 — EOL Apr 2026
Python 3.10 — EOL Oct 2026
PostgreSQL 14 — EOL Nov 2026
PHP 8.2 — EOL Dec 2026
Python 3.13 — Supported
Node.js 22 LTS — Supported
PostgreSQL 17 — Supported
Ubuntu 24.04 LTS — Supported
Kubernetes 1.33 — Supported
Free Tool
Scan Your Entire Stack
Upload a dependency file or paste your packages — requirements.txt, package.json, Gemfile, pom.xml, go.mod and more. Every line gets a lifecycle verdict from the same verified database that powers the whole site.
Privacy: Your dependency files are never uploaded or stored. Scanning happens entirely in your browser against endoflife.ai’s lifecycle database, fetched as a single static file. Product names leave this page only if you choose to send them: the stack alert sign-up or the “get matched” form.
Drop your dependency file here
or click to browse
SBOM (CycloneDX/SPDX)
requirements.txt
package.json
Gemfile
composer.json
pom.xml
go.mod
Cargo.toml
build.gradle
or paste directly
Prefer a full page? Open the standalone Stack Scanner →
Free Tool
The EOL Checker
Instant lifecycle status for any software product. Paste in a product name and know your risk in seconds.
$ eol check
Product
Windows 10
EOL Date
Oct 14, 2025
Status
End of Life
CVE Blind Spot Detected. This product no longer receives security patches. Attackers diff new CVE fixes against your EOL build — your scanner won't alert you. They know. You don't.
The Problem
Your scanner has a
blind spot.
CVE reporters only test supported software. When a vulnerability is discovered in code that also exists in your EOL version, they don't check — and neither does your scanner.
01
Incomplete CVE Reporting
Security researchers report vulnerabilities in supported versions only. EOL versions share the same vulnerable code but never appear in the advisory.
02
False Scanner Confidence
Your vulnerability scanner checks CVE affected version ranges. Your EOL version falls outside that range. No alert fires. You believe you're safe.
03
Attackers Know First
Threat actors read advisories and diff patches. They test EOL builds systematically. This isn't a zero-day — it's worse. They know. You don't.
Attack Chain — EOL Software
1
CVE Published
Vulnerability disclosed in supported versions only. Your EOL build has the same code.
Vulnerability disclosed in supported versions only. Your EOL build has the same code.
2
Attacker reads the advisory
Diffs the patch. Tests against EOL builds. Confirms vulnerability present.
Diffs the patch. Tests against EOL builds. Confirms vulnerability present.
3
Your scanner runs
Checks CVE affected version range. EOL version not listed. No alert fires.
Checks CVE affected version range. EOL version not listed. No alert fires.
4
You believe you're clean
Dashboard shows green. Breach window is open.
Dashboard shows green. Breach window is open.
✓
endoflife.ai flags it first
EOL detected. CVE blind spot warning surfaced. Risk known before attacker acts.
EOL detected. CVE blind spot warning surfaced. Risk known before attacker acts.
Running end-of-life software?
Get matched with extended support — free →
✓ We don't just publish EOL dates — we check them: 54 flagship products cross-checked against official vendor documentation, 11 vendor-published updates caught early and contributed back to the ecosystem.
How we verify →
Proprietary Intelligence
EOL Risk Score™
Every product and version page on endoflife.ai displays a proprietary 0–100 risk score — calculated at build time from four factors your vulnerability scanner doesn't track.
1
EOL Recency — 40 pts
How long past EOL — or how soon approaching. Accumulates over time with no reset.
2
Attack Surface — 30 pts
Critical tier for OS, runtimes, databases. High for frameworks and tools.
3
CISA KEV Exposure — 20 pts
Products with confirmed active exploitation history in the CISA KEV catalog.
4
Extended Support — 10 pts
No commercial patch vendor available means higher residual risk.
EOL Risk Score™ on all 14,000+ pages. Recalculated at every build.
Full Methodology →
Resource Hub
Lifecycle Intelligence
Guides, timelines, and analysis for security and engineering teams managing software lifecycles.
Start here — EOL for beginners.
Six short guides, zero prior knowledge assumed. Read in order or jump in anywhere.
1
What is EOL software?Every term & acronym · 12 min
2
What is a CVE?IDs, CVSS, KEV & EPSS · 11 min
3
Runtime vs framework vs libraryWhy the layer changes everything · 10 min
4
What is LTS?Support windows & the trap · 9 min
5
What is a dependency?Lockfiles, semver & SBOMs · 10 min
6
The day after EOLWhat actually happens · 9 min
Security Feed · Live
Exploited & Unpatchable
The vulnerabilities that are both actively exploited — on CISA's Known Exploited Vulnerabilities catalog — and affect software past end-of-life, where the fix ships only to supported versions and none is expected for the end-of-life one. Every entry hand-verified against the vendor's own advisory. Free JSON feed.
Data Report · 2026
The State of End-of-Life Software 2026
Our original analysis of 459 tracked technologies: 32 are tied to actively-exploited vulnerabilities, 30 score Critical, and 190 have a release reaching EOL this year. Full data tables and the 2026 EOL calendar.
New · Oct 27, 2026
Windows Server 2016 Supportende: 12. Januar 2027 – alle Versionen
Windows Server 2016 Supportende: 12. Januar 2027. Windows Server 2019 Supportende: 9. Januar 2029. Alle Versionen, ESU und Upgrade-Pfade.
New · Oct 27, 2026
Date de fin de support Windows Server : 2016 le 12 janvier 2027
Windows Server 2016 : fin de support le 12 janvier 2027. Windows Server 2019 : fin de support le 9 janvier 2029. Dates 2012 R2, 2022 et 2025.
New · Oct 27, 2026
SQL Server 2016 Supportende am 14. Juli 2026: alle Versionen bis 2025
SQL Server 2016 Supportende am 14. Juli 2026, SQL Server 2017 Supportende am 12. Oktober 2027, SQL Server 2019 Supportende am 8. Januar 2030.
New · Oct 27, 2026
SQL Server 2016 : fin de support le 14 juillet 2026 (cycle de vie)
SQL Server 2016 : fin de support le 14 juillet 2026. SQL Server 2019 : fin de support le 8 janvier 2030. Cycle de vie SQL Server, versions 2012 à 2025.
New · Oct 27, 2026
Java 17 Supportende 30. September 2026: Oracle-Lizenz
Java 17 Supportende: 30. September 2026. Oracle JDK 21: Supportende 30. September 2028. Oracle Java Lizenz pro Mitarbeiter und der Weg zu OpenJDK.
New · Oct 27, 2026
Licence Oracle Java : fin de support Java 17 le 30 septembre 2026
Licence Oracle Java : fin de support Java 17 le 30 septembre 2026. Oracle JDK 21 passe sous licence OTN au CPU d'octobre 2026. Dates et options.
New · Oct 27, 2026
Office 2024 Supportende: 9. Oktober 2029 (auch Office LTSC 2024)
Wie lange wird Office 2024 noch unterstützt? Bis zum 9. Oktober 2029, ebenso Office LTSC 2024: fünf Jahre, kein erweiterter Support. Dazu 2021 und 2019.
New · Oct 27, 2026
Fin de support Office 2024 et Office LTSC 2024 : 9 octobre 2029
Office 2024 et Office LTSC 2024 : fin de support le 9 octobre 2029, après cinq ans, sans support étendu. Comparaison avec 2021, 2019 et Microsoft 365.
New · Oct 26, 2026
F5 BIG-IP iSeries End of Software Support: January 1, 2027
F5 ends software support for 15 BIG-IP iSeries platforms and the 10350v FIPS on January 1, 2027: no CVE patches after that day. F5's K4309 dates.
New · Oct 26, 2026
Cisco NX-OS 10.3 End of Support: February 28, 2027
NX-OS 10.3 reaches End of Security Support and Last Date of Support on February 28, 2027, the day 10.5 moves to security fixes only. Cisco's dates.
New · Oct 26, 2026
Adobe Experience Manager 6.5 End of Support: February 28, 2027
AEM 6.5 core support ends February 28, 2027 and extended support February 28, 2028; Adobe continues the line as AEM 6.5 LTS. Adobe's own dates.
New · Oct 25, 2026
Node2Shell CVE-2026-111497: No Official Fix for EOL Node.js 20 and 18
Node2Shell (CVE-2026-111497), a Brotli flaw, is fixed in Node.js 22.23.4, 24.22.1 and 26.12.1. End-of-life Node 20 and 18 get no official fix.
New · Oct 24, 2026
D-Link DSR-150 End of Support: December 31, 2026 (Last Day of Support)
D-Link DSR-150 VPN router Last Day of Support: December 31, 2026, per D-Link's Legacy Products list. Sibling DSR dates, KEV status, what to do.
New · Oct 24, 2026
NixOS 26.05 Yarara End of Life: December 31, 2026
NixOS 26.05 end of life date: December 31, 2026, after seven months of bugfixes and security updates. Release dates, 25.11, and how to upgrade.
New · Oct 22, 2026
PHP2Shell: PHP RCE Fixed in 8.2 to 8.5, Source Patches for 7.4 to 8.1
PHP2Shell (CVE-2026-109618, CVE-2026-109619): fixed releases 8.5.12, 8.4.27, 8.3.36, 8.2.35. No 8.1 release; source-only patches for 7.4, 8.0 and 8.1.
New · Oct 21, 2026
Oracle October 2026 CPU: 1,295 Patches, None for Unsupported Versions
Oracle's October 2026 CPU has 1,295 patches per Oracle's advisory. Which versions were patched, which past-support versions got none, and next dates.
New · Oct 20, 2026
Red Hat Build of Keycloak 26.6 Full Support End: November 15, 2026
Red Hat build of Keycloak 26.6 Full Support end date: November 15, 2026; 26.4 Maintenance Support end date: December 3, 2026. What each phase covers.
New · Oct 20, 2026
Liferay DXP 2025.Q4 End of Premium Support: November 25, 2026
Liferay DXP 2025.Q4 End of Premium Support date: November 25, 2026, with no Limited Support phase. The quarterly release rule and where to move.
New · Oct 20, 2026
Aruba 8320 End of Sale November 30, 2026: JL479A, JL579A, JL581A
HPE Aruba Networking 8320 bundles JL479A, JL579A and JL581A End of Sale date: November 30, 2026; End of Support Life November 30, 2031. Replacements.
New · Oct 20, 2026
Red Hat Ceph Storage 7 End of Life: December 12, 2026, ELS to 2029
Red Hat Ceph Storage 7 End of Life date: December 12, 2026, the end of Production Support; the ELS add-on runs to August 31, 2029. Not upstream Ceph.
New · Oct 20, 2026
Cisco UCS 6454 and 64108 End of Sale: December 22, 2026
Cisco UCS 6454 and 64108 Fabric Interconnect End-of-Sale date: December 22, 2026; Last Date of Support: December 31, 2031 (EOL15931). Migration parts.
New · Oct 20, 2026
Red Hat AMQ Broker 7 Full Support End: December 31, 2026
Red Hat AMQ Broker 7 Full Support end date: December 31, 2026; Maintenance Support to April 30, 2028; ELS to November 30, 2030. What each phase covers.
New · Oct 20, 2026
Red Hat Data Grid 8.6 Full Support End: December 31, 2026
Red Hat Data Grid 8.6 Full Support end date: December 31, 2026; Maintenance Support to December 31, 2027; ELS to 2030 and 2033. Data Grid 8.5 has ended.
New · Oct 20, 2026
Fortinet Hardware End of Support in December 2026: FortiGate-60E
Fortinet End of Support: FortiGate-60E on December 29, 2026; FortiAnalyzer-800F, 3000F and FortiManager-300F on December 30, 2026. January 2027 rows.
New · Oct 20, 2026
OpenLDAP 2.5 End of Life: January 15, 2027, Critical Fixes Only
OpenLDAP 2.5 end of life date: January 15, 2027; critical fixes only until then, at the Project's discretion. 2.6 is the LTS release to move to.
New · Oct 20, 2026
FreeBSD 14.4 End of Life: December 31, 2026 (stable/14 to 2028)
FreeBSD 14.4-RELEASE expected end of life: December 31, 2026. FreeBSD 14 branch (stable/14): November 30, 2028. FreeBSD 14.5: June 30, 2027.
New · Oct 20, 2026
What Does EOL Mean? EOL Full Form and Meaning in Software
EOL means end of life. The EOL full form is end of life: the date a software maker stops publishing fixes, including security patches. EOL vs EOS vs EOSL.
New · Oct 20, 2026
EOL Date: What It Means and How to Look One Up for Any Software
An EOL date is the last day a software version gets fixes, including security patches. What it covers, how to look one up for any product, and live dates.
New · Oct 19, 2026
Red Hat Streams for Apache Kafka 2.9 End of Life: October 31, 2026
Streams for Apache Kafka 2.9 (AMQ Streams) end of life: October 31, 2026. The last ZooKeeper release; Red Hat requires KRaft before 3.x.
New · Oct 19, 2026
HPE Aruba Networking EOL October 31, 2026: APs, Switches, MSR Routers
HPE Aruba IAP-325, IAP-335, 2530 8G and 2540 24G PoE+ reach End of Support October 31, 2026; MSR3044 and MSR3024 leave sale that day.
New · Oct 19, 2026
End-of-Life Dates, Late October 2026: Node.js, Azure, AWS, Cisco
Lifecycle dates from October 20 to 31, 2026: Node.js 24 to Maintenance, Azure Communication Services and AWS sign-up limits, Cisco, Red Hat, Aruba.
New · Oct 18, 2026
Acronis Cyber Protect 16 End of Mainstream Support: October 28, 2026
Acronis Cyber Protect 16 Mainstream Support end date: October 28, 2026. Extended Support end date: October 28, 2027. What each phase still covers.
New · Oct 18, 2026
Cisco Catalyst 3650 End of Life: Last Date of Support October 31, 2026
Cisco Catalyst 3650 Last Date of Support: October 31, 2026, the same day security fixes end (EOL14617). Every milestone, and the Catalyst 9300 path.
New · Oct 18, 2026
GoAnywhere MFT 7.8 End of General Support: November 12, 2026
GoAnywhere MFT 7.8 General Support end date: November 12, 2026; Partial Support end date: May 12, 2027, per Fortra. What changes, and the KEV history.
New · Oct 18, 2026
Fortinet Hardware End of Life: Nine Models, October and November 2026
Fortinet End of Order and End of Support dates from October 29, 2026 to November 14, 2026: FortiGate-81E, FortiAuthenticator-2000E and seven more.
New · Oct 18, 2026
Kentico Xperience 13 End of Support: December 31, 2026
Kentico Xperience 13 end of technical support: December 31, 2026. Security hotfixes only until then, nothing after. The KEV flaws and the upgrade path.
New · Oct 18, 2026
Sitecore 10.0 and 10.1 End of Extended Support: December 31, 2026
Sitecore 10.0 and 10.1 Extended Support end date: December 31, 2026. Sustaining Support follows to the end of 2028. What changes, and the June 2026 policy.
New · Oct 18, 2026
Host Integration Server 2016 End of Support: January 11, 2027
Microsoft Host Integration Server 2016 extended support end date: January 11, 2027, a day before Windows Server 2016. What ends, and HIS 2020.
New · Oct 16, 2026
Hazelcast 5.3 End of Extended Support: November 19, 2026
Hazelcast Platform 5.3 Extended Support ends November 19, 2026, per Hazelcast's support table. Patches stopped May 19, 2025. Supported lines, upgrade path.
New · Oct 16, 2026
Oracle Identity Management 12c Premier Support Ends December 31, 2026
Oracle Access Management, Identity Governance, Unified Directory and Internet Directory 12c (12.2.1.x) leave Premier Support on December 31, 2026.
New · Oct 16, 2026
Juniper EX4300-48MP and EX4600 EOL: Last Order December 29, 2026
Juniper EX4300-48MP and EX4600 last order date: December 29, 2026. End of Engineering is December 29, 2029; End of Support, December 29, 2031.
OS · Oct 2026
January 2027 Microsoft End of Support: Windows Server 2016 and More
Microsoft ends support for Windows Server 2016, .NET Framework 4.6.2, System Center 2016, BizTalk 2016 and more on January 11 and 12, 2027.
Framework · Oct 2026
Umbraco 13 LTS End of Life: December 14, 2026
Umbraco 13 LTS reaches end of life on December 14, 2026, per Umbraco's LTS schedule. Security fixes only since December 14, 2025; move to Umbraco 17.
Framework · Oct 2026
MOVEit Transfer 2025.1 Leaves Active Support on November 18, 2026
Progress moves MOVEit Transfer 2025.1 to Sunset on November 18, 2026: no service packs or hot fixes after that. 2025.0 is Retired the same day.
Framework · Oct 2026
Oracle Fusion Middleware 12c Premier Support Ends December 31, 2026
Oracle Fusion Middleware 12c (12.2.1.x) Premier Support ends December 31, 2026 for WebLogic, Forms, HTTP Server, SOA, ADF; Extended to December 31, 2027.
Runtime · Oct 2026
Java 8 End of Life by Vendor: Red Hat's Ends November 30, 2026
Java 8 has no one end-of-life date. Red Hat OpenJDK 8 full support ends November 30, 2026; Oracle, Temurin, Corretto, Zulu, IBM run to December 31, 2030.
OS · Oct 2026
Windows 11 25H2 End of Support: October 12, 2027 (Home and Pro)
Windows 11 25H2 Home and Pro reach end of support on October 12, 2027; Enterprise and Education on October 10, 2028. What ends, and the move to 26H2.
Risk Intelligence · Oct 2026
Cisco Meraki End of Support: MX84 Ends October 31, 2026
The Meraki MX84 reaches End-of-Support on October 31, 2026; the MS450-12 leaves sale on October 29, 2026. Every 2026 and 2027 date, in Meraki's terms.
Risk Intelligence · Oct 2026
Business Central On-Premises EOL: Version 26 End Date October 13, 2026
Dynamics 365 Business Central on-premises version 26 end date: October 13, 2026 under Microsoft's Modern Lifecycle Policy. End dates for 29 to 13.
Risk Intelligence · Oct 2026
Confluent Platform 8.1.x: Community Support End Date October 15, 2026
Confluent Platform 8.1.x Community support end date October 15, 2026, Standard October 15, 2027, Platinum October 15, 2028. Every release's three dates.
Risk Intelligence · Oct 2026
Four SonicWall NSM On-Prem Versions End Support on October 30, 2026
SonicWall NSM On-Prem 3.2.0, 3.2.1, 3.5.0 and 4.0.0 reach Support Discontinued on October 30, 2026; 4.0.0 enters Limited Support on October 28, 2026.
Security · Oct 2026
Three KEV-Listed SolarWinds Products Reach End of Life: November 2026
Serv-U 15.5.1 ends November 18, 2026; Platform 2023.3 and 2023.4 November 20, 2026; Web Help Desk 12.4 to 12.8 November 30, 2026. All in CISA's KEV.
Runtime · Oct 2026
December 31, 2026 End-of-Life Day: PHP 8.2, Spring Boot 4.0 and More
PHP 8.2, Spring Boot 4.0, Oracle WebLogic 12.2, Office Online Server and Nutanix AOS 7.0 all end on December 31, 2026. Every row, grouped by what to do.
OS · Oct 2026
Windows Update Certificate Rotation 2027: Deadlines by Windows Version
Windows Update certificates expire in 2027. Server 2016, Server 2019 and Windows 10 Enterprise 2019 LTSC need the July 2026 update before May 17, 2027.
Risk Intelligence · Oct 2026
Arista EOS 4.31.x End of Support: October 13, 2026, and 4.30 to 4.36
Arista EOS 4.31.x End of Support date: October 13, 2026 under Arista's 36-month policy. Where 4.30 to 4.36 stand, and the exploited flaw with no fix.
Risk Intelligence · Oct 2026
Progress WS_FTP Server 9.0 Left Active Support on October 23, 2026
Progress moved WS_FTP Server 9.0 from Active to Sunset on October 23, 2026, with no service packs or hot fixes after that; Retired on April 23, 2027.
Risk Intelligence · Oct 2026
Kiali EOL: 2.21 to 2.25 Ended With Istio 1.29, October 15, 2026
Kiali has no end-of-life dates of its own: a version is supported while its Istio is. Kiali 2.21 to 2.25 ended with Istio 1.29 on October 15, 2026.
Framework · Oct 2026
Nutanix Files 5.3 End of Maintenance: November 30, 2026
Nutanix Files 5.3 reaches End of Maintenance on November 30, 2026 and End of Support Life on August 31, 2027, per Nutanix. What changes and how to plan.
Framework · Oct 2026
Cloudera 7.3.1 End of Life: December 31, 2026
Cloudera platform 7.3.1 reaches End of Support on December 31, 2026, per Cloudera's support lifecycle policy. What it means and the upgrade path to 7.3.2.
Risk Intelligence · Oct 2026
Silverstripe CMS 6.1 End of Life: October 18, 2026
Silverstripe CMS 6.1 reached end of life on October 18, 2026, per Silverstripe's support timeline. What Partial support meant and how to move to 6.2.
Framework · Oct 2026
DuckDB End of Life: 1.4 LTS Ends November 17, 2026, 1.5 in March 2027
DuckDB 1.4 LTS ends November 17, 2026, per DuckDB's release calendar, and 1.5 now runs to March 1, 2027. What changed and how to upgrade.
Risk Intelligence · Oct 2026
Rocket.Chat 8.3 and 8.4 End of Life: October 31, 2026
Rocket.Chat 8.3 and 8.4 reach end of life on October 31, 2026, per Rocket.Chat's Version Durability matrix. What stops working and how to upgrade.
OS · Oct 2026
Alpine Linux 3.21 End of Life: November 1, 2026
Alpine Linux 3.21 reaches end of support on November 1, 2026, per Alpine's release branches page. What it means for alpine:3.21 images and how to upgrade.
Security · Oct 2026
CISA AA26-281A: China-Linked Actors Exploit End-of-Life Software
Advisory AA26-281A (CISA, FBI, NSA and seven partners, October 8, 2026): eight old CVEs in end-of-life software, and the fix is replacement, not patching.
Framework · Oct 2026
FortiNAC 9.4 End of Support Is November 13, 2026
FortiNAC 9.4 end of support is November 13, 2026. Engineering support ended May 13, 2025, per Fortinet's product life cycle page. Every 8.x and 9.x branch.
Framework · Oct 2026
ansible-core 2.19 End of Life Is November 30, 2026: What Changes
ansible-core 2.19 end of life is November 30, 2026 (the project prints Nov 2026). Security fixes only; ansible-core vs ansible package dates and Python.
Framework · Oct 2026
QNAP NAS End of Life: Four Models Reach EOL on December 31, 2026
QNAP ES1686dc, ES2486dc, TDS-16489U R2 and TS-2888X end Technical Support and Security Updates on December 31, 2026, per QNAP's product status page.
Risk Intelligence · Oct 2026
HashiCorp Consul 1.22 and Nomad 1.11 End of Life: October 31, 2026
HashiCorp Consul 1.22 and Nomad 1.11 reach end of support on October 31, 2026, the day printed in HashiCorp's own support tables. Where to upgrade.
Framework · Oct 2026
Red Hat Satellite 6.19: Full Support Ends November 2026 (Estimated)
Red Hat Satellite 6.19 leaves Full Support in November 2026 (Red Hat estimate). 6.17 Maintenance Support ends November 28, 2026; 6.16 ended May 31, 2026.
Risk Intelligence · Oct 2026
Zerto 10.8 End of Life: Bug Fixes End October 28, 2026
Zerto 10.8 end of bug fixes is October 28, 2026 and end of support life is October 28, 2027, per HPE Zerto's lifecycle matrix. Also 10.0 Update 6 and 10.9.
OS · Oct 2026
SUSE Linux Micro 5.3 End of Life: October 30, 2026 (General Support)
SUSE Linux Micro 5.3 end of general support is October 30, 2026, per SUSE's lifecycle page. Dates for 5.4, 5.5, 6.0 and 6.1, and SUSE's upgrade path.
Framework · Oct 2026
AWS September 2026 Retirements: Four Services, Dates and the Cutoff
On September 29, 2026 AWS sunset Managed Blockchain, DevOps Guru, Backint for SAP ASE and Infrastructure Composer; new customers blocked October 29, 2026.
Security · Oct 2026
Atlassian CVE-2026-21589: Fixed Builds Only on LTS and Newest Lines
Atlassian's CVE-2026-21589 advisory names fixed builds only on LTS and newest lines; other supported Jira, Confluence, Bitbucket and Bamboo lines get none.
Risk Intelligence · Oct 2026
Electron 42 End of Life: October 20, 2026 (Three-Version Policy)
Electron 42 reached end of life on October 20, 2026, the day Electron 45 went stable. Only the latest three stable majors get fixes: 43, 44 and 45.
Framework · Oct 2026
Redis 8.0 End of Life: December 1, 2026 (Redis Open Source)
Redis 8.0 end of life is December 1, 2026, per Redis's version management page. It is a Standard release; Redis 8.2 is the Extended release to move to.
Framework · Oct 2026
PowerShell 7.4 End of Life: November 10, 2026, Same Day as 7.5
PowerShell 7.4 (LTS) and 7.5 both reach end of support on November 10, 2026, the day .NET 8 and .NET 9 end. Upgrade to PowerShell 7.6, the current LTS.
OS · Oct 2026
Windows Server サポート期限一覧：2016・2019・2022・2025 はいつまで？
Windows Server 2016 の延長サポート終了日は2027年1月12日、2022 のメインストリームサポート終了日は2026年10月13日。2019・2025・2012 R2 の期限と ESU を一覧で整理した日本語ガイド。
OS · Oct 2026
Windows 11 24H2 サポート期限は2026年10月13日：全バージョンの終了日一覧
Windows 11 24H2 のサポート期限は Home/Pro が2026年10月13日、Enterprise/Education が2027年10月12日。21H2〜26H2 全バージョンの終了日と「サポート終了」の意味、25H2 への更新方法を日本語で整理。
Risk Intelligence · Oct 2026
Office 2024 サポート期限は2029年10月9日まで｜LTSC 2024・2021・2019 一覧
Microsoft Office 2024 と Office LTSC 2024（Professional Plus・Standard）のサポート期限は2029年10月9日。延長サポートはありません。Office 2021・LTSC 2021・2019 の期限も一覧で整理した日本語ガイド。
OS · Oct 2026
SQL Server 2019 End of Life: January 8, 2030 (Extended Support)
SQL Server 2019 end of support is January 8, 2030. Mainstream support ended February 28, 2025, so it gets security fixes only until then.
OS · Oct 2026
RHEL 8 End of Life: May 31, 2029 (Maintenance Support Ends)
RHEL 8 end of life is May 31, 2029, the end of Maintenance Support. Full Support ended May 31, 2024; the paid ELS add-on can run to May 31, 2033.
OS · Oct 2026
Red Hat Support: RHEL Lifecycle Phases, ELS, EUS and Subscriptions
How Red Hat supports RHEL: ten-year life cycle, Full and Maintenance Support phases, ELS and EUS add-ons, what a subscription buys, how to check yours.
OS · Oct 2026
Windows Server 2025 End of Life: November 14, 2034 (Extended Support)
Windows Server 2025 end of life is November 14, 2034. Mainstream support ends November 13, 2029; after that it gets security updates only.
OS · Oct 2026
SQL Server 2022 End of Life: January 11, 2033 (End of Support)
SQL Server 2022 end of support is January 11, 2033. Mainstream support runs until January 11, 2028; after that it gets security fixes only.
OS · Oct 2026
Windows Server 2016 ESU: After January 12, 2027, Through 2030
Windows Server 2016 ESU gives security updates for up to three years after January 12, 2027, through 2030. Who qualifies and how it is bought.
Security · Oct 2026
FortiMail CVE-2026-104286: Fixed Builds Named, None for 7.2
FortiMail CVE-2026-104286 is being exploited. Fortinet now names the fixed builds 8.0.2, 7.6.7 and 7.4.9; the 7.2 branch gets an upgrade path, not a fix.
Risk Intelligence · Sep 2026
Apache Pulsar 4.0 LTS: Active Support Ended October 21, 2026
Apache Pulsar 4.0 LTS active support ended October 21, 2026; security patches continue until October 21, 2027. What each window means.
Risk Intelligence · Sep 2026
CockroachDB v24.1 End of Life: October 21, 2026 (Assistance Ended)
CockroachDB v24.1 reached end of life on October 21, 2026, when Assistance Support ended; Maintenance Support ended October 21, 2025. Where to go next.
Risk Intelligence · Sep 2026
Ceph Squid (19) End of Life: October 31, 2026, Ceph's Estimate
Ceph Squid (19.2) estimated end of life: October 31, 2026, per Ceph's own release index, about 24 months after release. What stops, and the Tentacle date.
Framework · Sep 2026
Fedora 43 End of Life: December 9, 2026, Four Weeks After Fedora 45 Ships
Fedora Linux 43 reaches end of life on December 9, 2026 on Fedora's schedule, four weeks after Fedora 45. What EOL means and the upgrade path.
Framework · Sep 2026
FortiAuthenticator 6.6 End of Support: December 11, 2026 and June 11, 2028
FortiAuthenticator 6.6 reaches End of Engineering Support on December 11, 2026 and End of Support on June 11, 2028. What each date means, plus 6.5 and 8.0.
OS · Sep 2026
RHEL 9 Life Cycle: Full Support Ends May 31, 2027, Every Phase Dated
RHEL 9 life cycle: full support ends May 31, 2027, maintenance May 31, 2032, ELCP to May 31, 2036. What each Red Hat phase delivers, which minors qualify.
Framework · Sep 2026
Office Online Server End of Support: December 31, 2026 (No Successor)
Office Online Server retires December 31, 2026 with no on-premises successor. What stops, what breaks in SharePoint and Exchange, and Microsoft's answer.
Risk Intelligence · Sep 2026
Office 2019 End of Life: Ended October 14, 2025 (Office 2016 Too)
Office 2019 end of life was October 14, 2025, the same day as Office 2016. What stopped, why there is no paid extension, and where to move.
Risk Intelligence · Sep 2026
Axios 0.x in 2026: Supported, but Only on the Newest Release
The Axios security policy lists the whole 0.x line as supported, but every 0.x fix in its 2026 advisories shipped as a new 0.x release rather than a backport, most recently 0.34.0.
Framework · Sep 2026
Claude Sonnet 4.5 Retires November 30, 2026: Deprecated September 30, Replacement Sonnet 5.5
On September 30, 2026 Anthropic deprecated claude-sonnet-4-5-20250929 with a retirement date of November 30, 2026 and claude-sonnet-5-5 as the recommended replacement.
Framework · Sep 2026
Red Hat JBoss Web Server 6: Full Support Ends November 30, 2026
Full Support for Red Hat JBoss Web Server 6 ends on November 30, 2026 according to Red Hat's Product Life Cycle data; Maintenance Support runs to November 30, 2028 and Extended Life Cycle Support 1 to November 30, 2031.
Risk Intelligence · Sep 2026
Qt 6.10 Standard Support Ended October 7, 2026: What Qt's Table Says
Qt 6.10 reached the end of its standard support on October 7, 2026 according to The Qt Company's own supported-versions table. Qt 6.11 runs to March 17, 2027 and Qt 6.8 LTS to October 8, 2029.
Security · Sep 2026
Three Vendors Shipped Emergency Fixes. All Stopped at End of Support.
On September 22, 2026 CISA added four actively exploited vulnerabilities in one batch: Arista VeloCloud Orchestrator, F5 BIG-IP APM and two in Check Point, all due for federal remediation by September 25, 2026.
Risk Intelligence · Sep 2026
Istio 1.29 End of Life: October 15, 2026, and the Move to 1.31
Istio 1.29 reached end of life on October 15, 2026 under the project's N+2 support policy, the date Istio's supported-releases table and its final 1.29.9 release notes give.
OS · Sep 2026
Windows 11 24H2 End of Support: October 13, 2026 (Home and Pro)
Windows 11, version 24H2 end of support dates: October 13, 2026 for Home and Pro and October 12, 2027 for Enterprise and Education, per Microsoft's lifecycle pages.
Risk Intelligence · Sep 2026
Five AWS Services Ended October 7, 2026 — and One Deletes Your Data
Amazon FinSpace, Amazon Lookout for Equipment, AWS IoT Greengrass V1, AWS Proton and AWS WAF Classic all reached end of support on October 7, 2026 - announced together on October 7, 2025 under AWS's standard twelve-month sunset.
Risk Intelligence · Sep 2026
SBOM Enrichment Walkthrough: End-of-Life Data in a CycloneDX SBOM
A worked example: a seven-component CycloneDX SBOM sent to POST /v1/sbom?enrich=1 and returned with end-of-life dates, support status, EOL Risk Scores and CISA KEV exposure on every component it recognises, with the source and…
OS · Sep 2026
RHEL and OpenShift Lifecycle Intelligence: Dates, Sources and API
How RHEL 8, 9 and 10 and OpenShift 4.16 to 4.22 lifecycle phases are read daily from Red Hat's Product Life Cycle Data API, reconciled against upstream and human decisions, and served with source and verification day through the…
OS · Sep 2026
Google GKE Kubernetes Version End of Life Dates (1.34: Jan 2027)
GKE supports each Kubernetes minor version for about 14 months of standard support and up to 24 months with the Extended channel.
OS · Sep 2026
Windows Server 2022 EOL and End of Support: October 14, 2031
Windows Server 2022 end of life (EOL) and end of support: October 14, 2031. End of mainstream support: October 13, 2026; from then on, security fixes only.
Framework · Sep 2026
IBM ProtecTIER End of Life: Support Ended November 30, 2020
IBM ended support for the last ProtecTIER models, the TS7650G (3958-DD6) and TS7620, on November 30, 2020. Every model and version, with IBM's dates.
Framework · Sep 2026
Cisco ISE 3.1 and 3.2 End of Life: Fixes Stop November 3, 2026
Cisco ISE 3.1 and 3.2 get their last software fixes on November 3, 2026, and support ends November 30, 2027. Cisco's milestones explained.
Risk Intelligence · Sep 2026
Confluence 7.13 Release Notes, Release Date and End of Life
Confluence 7.13 was released August 17, 2021 as a Long Term Support release and reached end of life August 17, 2023. Every 7.13.x release, dated.
Risk Intelligence · Sep 2026
EOL Risk Score vs CVSS: What Each One Measures
CVSS rates how severe one vulnerability is. The EOL Risk Score rates how risky one software version is to keep running. How they differ and work together.
Security · Sep 2026
EOL Risk Score vs EPSS vs CISA KEV: What Each One Tells You
EPSS estimates if a CVE will be exploited in the next 30 days. KEV lists CVEs already exploited. The EOL Risk Score rates a version's lifecycle risk.
Risk Intelligence · Sep 2026
Does an SBOM Show End-of-Life Software?
An SBOM lists components and versions, not support dates. What CycloneDX and SPDX can carry about end of life, and how to add lifecycle data to an SBOM.
Risk Intelligence · Sep 2026
Joomla 5 End of Life: Bug Fixes Stopped October 13, 2026
Joomla 5 stopped getting bug fixes on October 13, 2026; security fixes end October 12, 2027. What changes on each date and when to move to Joomla 6.
Security · Sep 2026
Cisco IOS XR 7.8 End of Life: Security Fixes End Nov 30, 2026
Cisco IOS XR 7.8 gets its last security fixes on November 30, 2026, and support ends May 31, 2027. Cisco's milestones explained, with other XR releases.
OS · Sep 2026
Azure AKS Kubernetes Version End of Life Dates (1.34: Nov 2026)
AKS supports three Kubernetes minor versions at a time. Kubernetes 1.34 on AKS ends in November 2026. Microsoft's calendar for 1.32 to 1.36, explained.
Framework · Sep 2026
Metabase 63 End of Life: November 1, 2026 (Versions and LTS)
Metabase 63 reaches end of life on November 1, 2026. Ordinary Metabase versions last about two months; the LTS version lasts 14. Every date, explained.
Framework · Sep 2026
Microsoft 365 Apps Version 2607 End of Service: November 10, 2026
Microsoft 365 Apps version 2607 reaches end of service on November 10, 2026. How long a version is supported on each update channel, and the 2026 change.
Risk Intelligence · Sep 2026
DrayTek Vigor2960 End of Life: Firmware Fixes End Dec 9, 2026
DrayTek Vigor2960 firmware maintenance ends December 9, 2026. The Vigor3900 and Vigor300B are already end of life. All three are on CISA's exploited list.
Framework · Sep 2026
LibreOffice 26.2 End of Life: November 30, 2026
LibreOffice 26.2 reaches end of life on November 30, 2026, and 25.8 already has. How long each LibreOffice version lasts and what businesses should run.
Risk Intelligence · Sep 2026
Amazon Corretto 26 End of Life: October 2026 (Support Calendar)
Amazon Corretto 26 reaches end of life in October 2026 and had its last planned update in July. Corretto 25 is supported to October 2032. Full calendar.
Risk Intelligence · Sep 2026
FortiGate / FortiOS サポート期限一覧：7.2 は2026年9月30日に終了
FortiGate のファームウェア FortiOS 各バージョンのエンジニアリングサポート終了日とサポート終了日を、Fortinet の製品ライフサイクル情報に基づいて一覧で整理した日本語ガイド。7.2 のサポート終了と、7.4・7.6・8.0 への移行先の期限も解説します。
Runtime · Sep 2026
Azul Extends Java 6 and Java 7 Support to December 2029
Azul's support roadmap now lists paid Legacy Production Support for Java 6 and Java 7 to December 2029, two years later than before. What it covers.
AI Models · Sep 2026
ASD Warns Legacy Technology Will Be First Hit in AI-Enabled Attacks
Australia's cyber agency says legacy technology will be first to fall in a major AI-enabled attack. What ASD counts as legacy, and how to find yours.
Framework · Sep 2026
Apache Spark 4.0 End of Life: November 23, 2026 (New 6-Month Policy)
Apache Spark 4.0 reaches end of life on November 23, 2026. From Spark 4.3 most releases are maintained for only 6 months. Dates for 3.5, 4.0, 4.1 and 4.2.
AI Models · Sep 2026
iPhone End of Life Chart: Which Models Still Get Updates in 2026
Apple never announces an iPhone end-of-life date. This chart shows which models run iOS 27, which get security fixes only, and which get nothing.
Risk Intelligence · Sep 2026
Microsoft Edge End of Support: How Long Each Version Is Supported
Microsoft Edge versions get security updates only while they are the latest: two weeks on Stable since version 152, eight on Extended Stable. The rules.
Framework · Sep 2026
FortiOS 7.4 End of Support: May 11, 2027 and November 11, 2028
FortiOS 7.4 reaches End of Engineering Support on May 11, 2027 and End of Support on November 11, 2028. What each date means, plus 7.2, 7.6 and 8.0.
Security · Sep 2026
Python 3.10 End of Life: October 2026, When Security Fixes Stop
Python 3.10 reaches end of life in October 2026. It has been security-only since April 2023. What stops, which versions are supported, and where to move.
Risk Intelligence · Sep 2026
Office 2024 End of Support: October 9, 2029 (Office LTSC 2024 Too)
Microsoft Office 2024 and Office LTSC 2024 are supported until October 9, 2029: five years, no extended support. How that compares with 2021, 2019 and 365.
Risk Intelligence · Sep 2026
Checkmk 2.3 End of Life: Passive Maintenance Ends October 29, 2026
Checkmk 2.3 reaches end of life on October 29, 2026, when passive maintenance ends. Active maintenance ended November 6, 2025. Dates for 2.3, 2.4 and 2.5.
OS · Sep 2026
Windows Server 2016 EOL and End of Support: January 12, 2027
Windows Server 2016 end of life (EOL) and end of support is January 12, 2027. Paid Extended Security Updates run through 2030. Dates, ESU and upgrades.
OS · Sep 2026
Windows Server 2019 End of Life (EOL), End of Support: January 9, 2029
Windows Server 2019 end of life (EOL) and end of support: January 9, 2029. Mainstream support ended January 9, 2024; security fixes only until then.
Risk Intelligence · Sep 2026
ADC End of Life Replacement: NetScaler, F5 BIG-IP and FortiADC Dates
An application delivery controller has two end-of-life clocks, the appliance and the firmware. NetScaler MPX and SDX hardware end dates with the replacement platforms Citrix names in its own notices, NetScaler ADC firmware…
OS · Sep 2026
Linux Kernel 5.10 and 5.15 End of Life: December 2026 Longterm Dates
kernel.org projects end of life for the 5.10 and 5.15 longterm kernels in December 2026. Every longterm branch and its projected date, who the kernel.org date applies to (custom builds, embedded devices, appliances, vendor device…
Framework · Sep 2026
Angular LTS Explained: Versions in LTS Now, 20 Ends November 28, 2026
Angular LTS is the 12-month security-fix phase after active support. Angular 20 leaves it on November 28, 2026. Dates for every supported version.
Risk Intelligence · Sep 2026
Rancher 2.11 End of Life: October 24, 2026 (SUSE Rancher Prime)
Rancher 2.11 reached end of life on October 24, 2026; its maintenance ended October 24, 2025. SUSE's dates for every Rancher 2.x line and where to move.
Risk Intelligence · Sep 2026
Next.js 15 End of Life: Maintenance LTS Ended October 21, 2026
Next.js 15 reached end of life on October 21, 2026, two years after its release. What Maintenance LTS covered until then, and what changes in Next.js 16.
Risk Intelligence · Sep 2026
Office 2021 End of Life: October 13, 2026 (Office LTSC 2021 Too)
Microsoft Office 2021 end of support date: October 13, 2026, and Office LTSC 2021 ended the same day. What stopped, which editions, and where to move.
Framework · Sep 2026
ColdFusion 2021 End of Life: Extended Support Ends November 10, 2026
Adobe ColdFusion 2021 core support ended November 10, 2025 and extended support ends November 10, 2026. Every ColdFusion version's dates from Adobe's own support matrix, and where to move.
Database · Sep 2026
SQL Server End of Life: Every Version, 2012 to 2025, Support End Dates
Microsoft SQL Server end-of-life dates for every version from 2012 to 2025: mainstream support, extended support and Extended Security Updates in one table, the service-pack trap that gives SQL Server 2016 and older the wrong…
Database · Sep 2026
Oracle Database サポート期限一覧：12c・19c・21c・26ai はいつまで？
Oracle Database 19c・21c・26ai の Premier Support と Extended Support の終了日、サポートが終了した 12c・18c の日付を、Oracle の Lifetime Support Policy に基づいて一覧で整理した日本語ガイド。19c の Java 8 関連の除外、23ai から 26ai への名称変更も解説します。
OS · Sep 2026
Ubuntu サポート期限一覧：22.04・24.04・20.04 LTS はいつまで？
Ubuntu LTS 各バージョン（26.04・24.04・22.04・20.04・18.04）の標準サポートと Ubuntu Pro（ESM）の終了日を、Canonical の公表値に基づいて一覧で整理した日本語ガイド。標準サポート中でも universe は ESM の対象である点、中間リリースの9か月サポートも解説します。
Framework · Sep 2026
Spring Boot（SpringBoot）サポート期限一覧：4.1・4.0・3.5・2.7 はいつまで？
Spring Boot 2.7 から 4.1 までの OSS サポートと商用サポートの終了日を一覧で整理した日本語ガイド。3.5 の OSS サポートはすでに終了。最終マイナーバージョンに商用サポートが5年間追加される Spring のサポートポリシーと、2.x・3.x からの移行の考え方も解説します。
Runtime · Sep 2026
PHP サポート期限一覧：PHP 8.2・8.3・8.4・8.5 はいつまで？
PHP 7.4 から 8.5 までのアクティブサポートとセキュリティサポートの終了日を、php.net の公表値に基づいて一覧で整理した日本語ガイド。2年間のアクティブサポートと2年間のセキュリティサポートという仕組み、OS 同梱の PHP との違いも解説します。
Security · Sep 2026
Cisco ISE CVE-2026-76460: 3.1 to 3.5 Patched, 3.1 and 3.2 End Nov 3
CISA listed Cisco ISE CVE-2026-76460, an unauthenticated API bypass of the management interface at CVSS 10.0 and exploited in the wild, on September 16, 2026 with a September 19, 2026 deadline and a forensic-triage flag.
OS · Sep 2026
IBM End of Support September 30, 2026: z/OS 2.5, IBM i 7.4, Semeru 26
Three IBM support clocks stopped on September 30, 2026: z/OS 2.5 left standard support on IBM's product lifecycle list, IBM i 7.4 left standard support with a paid Service Extension to September 30, 2029, and Semeru Runtime 26…
Risk Intelligence · Sep 2026
Sonatype Nexus Repository 3.79 Is Sunsetted on October 1, 2026
Sonatype's Nexus Repository 3 Versions Status page carries 3.79 as Extended Maintenance with a sunset of October 1, 2026; under Sonatype's Software Support Policy a sunsetted release has no support obligations.
Runtime · Sep 2026
AWS Lambda .NET 5, 6 and 8: Every Deprecation Date
AWS never shipped a managed .NET 5 Lambda runtime; .NET 5 was container-only and AWS deprecated it on May 10, 2022, the day Microsoft ended .NET 5 support.
Security · Sep 2026
Cisco Secure Email Gateway CVE-2026-76461: Root by Email, Due Sep 17
CISA listed Cisco Secure Email Gateway CVE-2026-76461, an unauthenticated SQL injection to root from one crafted email, on September 14, 2026 with a September 17, 2026 deadline and a forensic-triage flag.
Security · Sep 2026
Cisco SD-WAN 20.9 Left Security Support on September 30, 2026
Cisco fixed eight exploited Catalyst SD-WAN flaws on the 20.9 line in 2026, the last on September 30, the final day of its End of Vulnerability/Security Support window.
Security · Sep 2026
GitLab CVE-2026-85706: Four Lines Still Without a Fix
CISA added CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in GitLab's repository commits API, to its Known Exploited Vulnerabilities catalog on September 11, 2026 with a September 14 deadline.
Security · Sep 2026
MikroTik RouterOS on CISA KEV: Only 6.49.21 or Later Fixes Any 6.x
CISA added CVE-2026-86060 and CVE-2026-67277 to its Known Exploited Vulnerabilities catalog on September 10, 2026 with a September 13 deadline.
Security · Sep 2026
Cisco FMC CVE-2026-20079: Fixed on Six Trains, Silent on 7.3 and 7.1
Cisco's CVSS 10.0 Firewall Management Center authentication bypass is exploited by three groups, Talos said the day CISA listed it. Hot fixes cover 7.0, 7.2, 7.4, 7.6, 7.7 and 10.0.
OS · Sep 2026
Microsoft Moved the Windows 10 Deadline in a Footnote. Even We Missed Four Pages.
Microsoft extended Windows 10 consumer Extended Security Updates to October 12, 2027 with an editor's note on June 25, 2026, not an announcement. Most trackers, and four of our own pages, kept saying October 2026 for 76 days.
Security · Sep 2026
Adobe Patched Magento Versions It Stopped Supporting. Open Source Stores Below 2.4.6 Got Nothing.
CVE-2026-75650, a CVSS 10.0 unauthenticated remote code execution flaw in Adobe Commerce and Magento Open Source, exploited since September 4 and in CISA's KEV catalog since September 8.
Framework · Sep 2026
AWS App Mesh Shut Down September 30, 2026 — What Happens and Where to Move
AWS did not merely end support for App Mesh on September 30, 2026: the console and every mesh resource became inaccessible.
OS · Sep 2026
Fin de support RHEL 8 et RHEL 9 : dates 2026
RHEL 8 : fin de support le 31 mai 2029. RHEL 9 : fin de support le 31 mai 2032. RHEL 10 : fin de support le 31 mai 2035. RHEL 7 : fin de vie le 30 juin 2024 (ELS RHEL 7 jusqu'au 31 mai 2029).
Framework · Sep 2026
November 10, 2026: Four Support Clocks Run Out on One Patch Tuesday
On November 10, 2026, .NET 8 (LTS) and .NET 9 both reach end of life, PowerShell 7.4 (LTS) and 7.5 end the same day, and Windows 11 23H2 Enterprise and Education stops being serviced.
Framework · Sep 2026
Firefox ESR End of Life & Support Options: What To Do When ESR Patches Stop (140 ESR Ended September 29, 2026; 153 ESR Current)
Firefox 140 ESR reached end of life on September 29, 2026; Firefox 153 ESR (released July 21, 2026) is the replacement, and 115 ESR stays patched for older Windows and macOS until March 31, 2027.
Compliance · Sep 2026
How to Audit an SBOM for End-of-Life Software — Four Real SBOMs, 21,347 Components, and Why Name Matching Is the Wrong Tool
An SBOM lists what you ship; it does not say whether any of it is still supported. How to join CycloneDX and SPDX components to lifecycle data by package URL (exact) instead of by name (a guess), what endoflife.ai's purl map…
Framework · Sep 2026
Cisco's RV Routers Run Out: The Last Small Business RV Models Lost Support September 30 and Lose It October 31, 2026, With No Replacement
Cisco's Small Business RV routers hit their Last Date of Support in two waves: RV160, RV160W, RV260, RV260W, RV260P, RV340W and RV345P reached it on September 30, 2026, and RV340 and RV345 reach it on October 31, 2026.
Risk Intelligence · Sep 2026
Moodle 5.0 Reached End of Life on October 5 — and 5.1 Left General Support the Same Day
Moodle 5.0's security support ended October 5, 2026; general support ended April 20, 2026. On the same day Moodle 5.1 left general support and runs security-only to April 19, 2027, while the older 4.5 LTS is supported to October…
Framework · Sep 2026
No, NetScaler 13.1 Did Not Die on September 15 — That Was End of Maintenance, and End of Life Is a Year Later
Coverage in early September 2026 said NetScaler ADC firmware 13.1 would reach end of life on September 15, 2026. The vendor's release-cycle article CTX241500 says otherwise: 13.1 reached End of Maintenance on September 15, 2026…
Risk Intelligence · Sep 2026
Microsoft Starts Switching Off Exchange Web Services on October 1 — and the Opt-In Window Already Closed
Exchange Web Services in Exchange Online: phased disablement started October 1, 2026 and EWS is fully and permanently disabled April 1, 2027, with no exceptions. The end-of-August opt-out window has passed.
Security · Sep 2026
JFrog Patched Every Supported Artifactory Branch in a Day. The Exposure Is on the Ones It No Longer Supports.
CISA has confirmed exploitation of CVE-2026-82329, a CVSS 9.8 authentication bypass to administrator in JFrog Artifactory, with a federal due date of September 5, 2026. JFrog fixed all six supported branches on August 28.
Security · Sep 2026
SonicWall SMA 1000 Under Active Attack: A CVSS 10.0 SSRF, a Federal Deadline of September 5, and the Sixth KEV Entry Since January 2025
SonicWall confirms active exploitation of two SMA 1000 vulnerabilities, one a CVSS 10.0 pre-authentication SSRF, and CISA has given federal agencies until September 5, 2026.
Risk Intelligence · Sep 2026
SonicWall's Gen 6 Cliff: TZ, NSA and NSa Firewalls Lost Support in Two Waves, August 1 and October 1, 2026
SonicWall's Gen 6 firewalls reached End of Support in two waves: TZ400, TZ600, NSA 3600 and NSa 3650 on August 1, 2026, and TZ350, TZ500, SOHO 250, NSA 4600 to 6600 and NSa 4650 to 6650 on October 1, 2026.
Risk Intelligence · Sep 2026
The ASA 5500-X Is Over: Cisco's 5506-X, 5508-X and 5516-X Passed Their Last Date of Support on August 31, 2026
Cisco's ASA 5506-X, 5508-X and 5516-X reached their Last Date of Support on August 31, 2026, a year after the 5525-X, 5545-X and 5555-X.
Security · Sep 2026
Exploited, Abandoned, Still Online: The End-of-Life Routers CISA Keeps Ordering Unplugged
Seven CISA KEV entries share an unusual required action: not patch - disconnect. D-Link routers end-of-life since 2017 and Zyxel DSL gateways 'EOL for years' keep landing in the exploited catalog, one almost seven years after the…
Risk Intelligence · Sep 2026
FortiManager 7.2 End of Support: October 11, 2026 - the FortiJump Line Ran Out of Road
FortiManager 7.2 End of Support date: October 11, 2026, per Fortinet's own lifecycle portal - and engineering support already ended April 2025.
Risk Intelligence · Sep 2026
Ivanti's Hardware Cliff: ISA6000 and ISA8000 Reach End of Life January 31, 2027 - and Take Connect Secure 22.x With Them
Ivanti's ISA6000 and ISA8000 appliances reach end of support and end of life on January 31, 2027 - the hardware under the most-exploited VPN in CISA's KEV catalog.
Security · Sep 2026
PaperCut NG/MF Is Being Exploited — and Versions 23 and Earlier Are Not Getting the Patch
CVE-2026-82078 and CVE-2026-81578 chain into pre-auth RCE against PaperCut NG/MF, on CISA's KEV since August 31, 2026 with a September 14 federal deadline. Emergency Patch Release 3 covers v24/v25/v26 only
Risk Intelligence · Sep 2026
Ivanti Connect Secure Hits End of Support Days Before CISA's Edge-Device Deadline
ICS 22.7, 22.8 and the 25.1.0-25.1.2 releases all reach End of Support on January 31, 2027 - days before BOD 26-02's twelve-month decommission deadline lands in early February.
Framework · Sep 2026
September 30, 2026: The Worst Deadline Day of the Quarter
Four unrelated vendors, one date: Project Online retires outright, FortiOS 7.2 and four SonicOS releases hit end of support, ten Azure services shut down - with ASA 9.23's end-of-sale the day before and NetScaler 13.1's end of…
Framework · Sep 2026
Microsoft Project Online Retired September 30 — and It's Missing From Microsoft's Own 2026 End-of-Support List
Project Online retired September 30, 2026 under the Modern Lifecycle Policy — the service stops, not just support, and Microsoft's guidance is to back up data first.
Risk Intelligence · Sep 2026
End of Support vs. End of Life: What's the Difference?
There is no industry standard — EOS and EOL mean whatever each vendor says they mean. The decoder: what Microsoft, Red Hat, Cisco, Oracle, Canonical, Fortinet, PHP, Python, CISA and vendors that publish nothing actually mean, the…
OS · Aug 2026
October 13, 2026: The Day Three Windows Support Clocks Ran Out
On one Patch Tuesday — October 13, 2026 — the final ESU year for Windows Server 2012 and 2012 R2 ended, Windows 10's first commercial ESU year expired (consumer ESU now runs to October 12, 2027), and Windows Server 2022 left…
Risk Intelligence · Aug 2026
Oracle Legacy Middleware End of Life: Discoverer, Endeca, Forms 11g — and Why Oracle Never Says “Dead”
Oracle Discoverer's last patches shipped June 2017. Endeca's between 2018 and 2021. Forms and Reports 11g in 2018. None of them ever got an end-of-life announcement — they slid into indefinite Sustaining Support instead.
OS · Aug 2026
Ubuntu End of Life: Every Version's Dates — 22.04, 24.04, 20.04 and the Three Support Clocks
Ubuntu 22.04 LTS standard support ends May 31, 2027; 24.04 runs to May 31, 2029 (ESM to 2034); 20.04 left standard support in May 2025 and is ESM-only to April 2030; 16.04's ESM closed in April 2026 making it fully end of life.
Risk Intelligence · Aug 2026
Apache Tomcat Marks Dead Versions "Unknown" — and Your Scanner Reads That as Clean
Apache Tomcat's own security pages state that for end-of-life versions the status of new vulnerabilities defaults to unknown, the pages are never updated, and no announcement is made.
Security · Aug 2026
Gitea's First KEV Entry: CVE-2026-60004, a Two-Day Federal Deadline, and a Release Policy With Nowhere to Hide
CISA added CVE-2026-60004 - a CVSS 9.8 code-injection flaw in Gitea's diffpatch endpoint - to the KEV catalog on August 25 with an August 28 deadline.
Security · Aug 2026
WebLogic's Perfect-Score KEV Entry: CVE-2026-21962, a Three-Day Federal Deadline, and the Versions That Will Never Get the Patch
CISA added CVE-2026-21962 - a CVSS 10.0, unauthenticated flaw in Oracle HTTP Server and the WebLogic Server Proxy Plug-in - to the KEV catalog on August 24 with an August 27 deadline.
Risk Intelligence · Aug 2026
The QRadar SaaS Shutdown: What Dies August 31, What Is Already Gone, and Why There Is No Extended Support
Palo Alto Networks retired the QRadar SaaS products acquired from IBM: QRadar EDR, X-Force Threat Intelligence, Randori Attack and QRadar Advisor with Watson all reached end of life August 31, 2026 - and Randori Recon,…
Framework · Aug 2026
Azure Retires 20+ Services and APIs This September — Seven Separate Deadlines, One Table
Microsoft’s own 2026 end-of-support page lists more than twenty Azure services, APIs and SDKs shutting down across seven September dates — 13, 14, 15, 17, 19, 21 and 30 September 2026.
Security · Aug 2026
Zimbra End of Life: 8.8.15, 9.0 and 10.0 Get No Fix for Exploited CVE-2026-73570
CISA added Zimbra’s CVE-2026-73570 (unauthenticated OS command injection via the optional SNMP component, CVSS 8.9) to the Known Exploited Vulnerabilities catalog on August 21, 2026 with an August 24 federal deadline.
Security · Aug 2026
The Backport Myth: We Tried to Prove 624 EOL Versions Were Unpatchable. Vendors Kept Proving Us Wrong.
Original research: 624 candidate (product × CVE) pairs from crossing CISA’s exploited-vulnerabilities catalog with verified end-of-life data — the ~98 most plausible verified line-by-line against vendor advisories.
OS · Aug 2026
IBM z/OS 2.5 End of Support: September 30, 2026 — the Three-Year Paid Extension, and the Move to 3.1 or 3.2
IBM's lifecycle page puts z/OS 2.5 end of support at September 30, 2026 (GA September 30, 2021; withdrawn from marketing January 29, 2024). z/OS follows the Enhanced policy — five years standard, up to three more paid
Risk Intelligence · Aug 2026
Ansible Automation Platform 2.5: Maintenance Support 1 Ended October 2, 2026 — What Still Gets Fixed After That, and Until When
Red Hat AAP 2.5 left Maintenance Support 1 on October 2, 2026 — the last phase with Important-severity security fixes and any bug fixes. Maintenance Support 2 (Critical-only) runs to October 2, 2027.
Risk Intelligence · Aug 2026
Altiris End of Life: The Product Is Now Symantec ITMS Under Broadcom — 8.6 Died June 1, 2026, and Everything Before 8.5 Is Long Gone
'Altiris' lifecycle data lives under Symantec IT Management Suite on Broadcom's portal. Verified there: every version before 8.5 is end of life; ITMS 8.6 and its component suites reached end of support June 1, 2026;
Runtime · Aug 2026
Java’s September 2026 Cliff: Nine Runtime Lines Reached End of Life in One Month — Including Oracle JDK 17 Premier Support
Nine Java runtime lines reached end of life in September 2026: SapMachine 17 (September; SAP prints the month only), the non-LTS 26 series across six vendors as JDK 27 ships, and — the big one
Security · Aug 2026
MLflow 2.x: Actively Exploited (CVE-2026-64849), Fixed Only in 3.15 — and Never Declared End of Life
CISA added MLflow’s CVSS 9.3 SSRF flaw CVE-2026-64849 to the Known Exploited Vulnerabilities catalog on August 19, 2026 with a September 2 federal deadline. GitHub’s advisory records the fix as first patched in 3.15.0
Database · Aug 2026
IBM Netezza End of Life: Every Appliance Date and the 2028 Deadline
IBM's own dates for every Netezza appliance generation, the 2028 end of support for Cloud Pak for Data System, and what IBM still sells. No service extensions.
OS · Aug 2026
Microsoft Master Data Services End of Life: Removed in SQL Server 2025, Supported Only While SQL Server 2022 Is
Master Data Services (MDS) is removed in SQL Server 2025 and supported only in SQL Server 2022 and earlier — so its end of life is SQL Server 2022's: mainstream support to January 11, 2028, extended support to January 11, 2033.
OS · Aug 2026
VMware Perpetual License End of Availability: What Broadcom Ended, What Still Works, and What Happens When Your Support Expires
VMware perpetual licenses are end of availability, not end of life: Broadcom stopped selling them and SnS renewals (announced December 2023, listed January 2024), existing licenses keep running and are supported to the end of…
Framework · Aug 2026
Drupal 7 End of Life: Support Ended January 5, 2025 — What Stopped, What Still Runs, and the Two Ways Forward
Drupal 7 reached end of life on January 5, 2025 — no more security or compatibility fixes for core or contributed modules. What actually ended, the supported Drupal 10/11 releases and their dates (10.6 and 11.3 to December 2026;
Security · Aug 2026
Symfony End of Life: Every Version's Dates — 2.8, 3.4 and 4.4 Are Dead, 5.4 Is Security-Only to 2029, 6.4 and 7.4 Are the LTS Lines
Symfony 2.8 LTS ended November 1, 2019, 3.4 on November 1, 2021, 4.4 on November 21, 2023. Today's LTS lines: 5.4 (security fixes only, to February 2029), 6.4 (bug fixes to November 2026, security to November 2027) and 7.4 (to…
Security · Aug 2026
Two KEV Entries, One Lesson: macOS Ventura Gets No Fix at Any Price, Windows 10 Gets One Only Behind ESU
On August 18, 2026 CISA added two actively exploited flaws to its KEV catalog that are end-of-life stories. CVE-2026-65400 (macOS Screen Sharing authentication bypass) was fixed August 6 only in Tahoe 26.6.1, Sequoia 15.7.9 and…
Security · Aug 2026
vCenter 7.0 and CVE-2026-59310: Actively Exploited, Fixed Only for Extended-Support Contracts — What Broadcom's Advisory Actually Says
CISA added CVE-2026-59310 (CVSS 9.8, path traversal in the vCenter Syslog server, remote code execution) to its KEV catalog on August 18, 2026, deadline August 21.
Risk Intelligence · Aug 2026
The Atlassian Double Cliff: Bamboo 10.0 Died August 21, Jira Software 10.0 Died August 22
Atlassian's two-year rule retired Bamboo 10.0 on August 21, 2026 and Jira Software 10.0 on August 22 — one day apart, and most Atlassian shops run both. Neither is an LTS.
Risk Intelligence · Aug 2026
Confluence End of Life: Every Version Dies Two Years After Release — and the 7.x Holdouts Are Three LTS Lines Behind
Atlassian retires every Confluence version exactly two years after its release. Confluence 7.13 LTS died August 17, 2023, 7.19 LTS on December 13, 2024, 8.5 LTS on December 15, 2025 — and 9.2 LTS goes on December 10, 2026.
Database · Aug 2026
Elasticsearch End of Life: Why 8.19 Outlives 9.1, 9.2 and 9.3 — Every Version's Real Date
Elasticsearch minors live about six months — 9.1, 9.2 and 9.3 are already end of life — but the LAST minor of each major gets the long tail: 8.19 is supported to July 15, 2027, outliving three 9.x releases.
Runtime · Aug 2026
NumPy 2.1 End of Life: August 19, 2026 — and the Same Day, Python 3.11 Fell Off NumPy's Floor
NumPy 2.1 reached end of life on August 19, 2026 under NEP 29's 24-month rule. The same schedule dropped Python 3.11 from NumPy's support floor that day (3.12+ / 2.2+ from August 19), even though Python 3.11 itself lives to…
OS · Aug 2026
The Whole Proxmox 8 Era Ended August 31, 2026 — VE, Backup Server, and Mail Gateway Together
Proxmox VE 8, Proxmox Backup Server 3, and Proxmox Mail Gateway 8 all reached end of life on August 31, 2026 — the same day, because all three ride Debian 12's security lifecycle.
Risk Intelligence · Aug 2026
Bitbucket 9.1 Died August 27, 2026 — and a Bitbucket Version Dies Every Month Through Year-End
Bitbucket Data Center 9.1 reached end of support on August 27, 2026, exactly two years after release — and Atlassian's two-year clock retires 9.2 in September, 9.3 in October, and the 9.4 LTS in December.
OS · Aug 2026
containerd 1.7 Ended September 30, 2026 — the Last 1.x Line Under Your Kubernetes Nodes
containerd 1.7, the final 1.x release line, reached end of life on September 30, 2026 after three and a half years as an LTS. It is the container runtime under most Kubernetes nodes and Docker hosts
OS · Aug 2026
Kubernetes LTS Does Not Exist Upstream — Here Is What Actually Buys You Time
There is no Kubernetes LTS release: every minor version gets roughly 14 months (12 standard + 2 maintenance) and a new one ships every four months. Long-term support does exist
Risk Intelligence · Aug 2026
Apache Camel 4.14 Went EOL Nine Days Early — and the Vendor Pages That Would Tell You Are Gone
Apache Camel 4.14 reached end of life on August 11, 2026 — nine days before the August 20 date most trackers still publish — because Camel ends an LTS when the next LTS ships, and 4.22 shipped early.
OS · Aug 2026
CentOS Extended Support in 2026: Who Still Patches CentOS 7 and 8 — and What It Buys You
CentOS 7 has been end-of-life since June 30, 2024 and CentOS 8 since December 31, 2021 — yet both still run production fleets.
Security · Aug 2026
Traefik 3.6 End of Life: August 16, 2026 — the First Traefik Minor With a Security Tail
Traefik 3.6 reached end of security support on August 16, 2026. It is the first Traefik minor ever given a security tail — before the v3.6 policy change, the average 3.x minor lived 93 days and died the day its successor shipped.
Risk Intelligence · Aug 2026
Grafana 12.3 End of Life: August 19, 2026 — and 12.4 Outlives Every Grafana 13
Grafana 12.3 reached end of life on August 19, 2026 — exactly nine months after release. Grafana's 15-month window only applies to the last minor of a major line, which is why 12.4 (EOL May 24, 2027) outlives both Grafana 13.0…
Risk Intelligence · Aug 2026
Mattermost 10.11 Ended August 15, 2026 — and the Newest Release Is the Wrong Upgrade
Mattermost 10.11 reached end of life on August 15, 2026. It is one of only two releases in 57 that got a twelve-month support window instead of the usual three — and the newest release, 11.11, expires on December 15, 2026.
Security · Aug 2026
CVSS 9.8, EPSS 10.7%, and Confirmed Exploited: When the Three Scores Disagree
CVSS says how bad, CISA KEV says whether it is being exploited, EPSS says how likely it is next. On our Exploited & Unpatchable feed they openly disagree
Framework · Aug 2026
React のサポート期限はいつまで？公式の EOL 日は存在しません【2026年8月版】
React には公式のサポート期限（EOL 日）が存在しません。React 19・18・17・16・15 の公開日・最終リリース日・EOL リスクスコアを一覧で整理し、「期限がない」ことが安心材料ではない理由、React 18 の「凍結」状態の見分け方、CVE-2025-55182 の正確な影響範囲、稟議や保守契約で使える判断材料までを日本語で解説します。
Security · Aug 2026
ESXi 6.5, 6.7 & 7.0 CVEs: What Is Unpatched — and What Will Never Be Patched
Five KEV-listed CVEs map onto EOL ESXi versions: CVE-2024-37085 is ransomware-exploited and Broadcom lists ESXi 7.0 as No Patch Planned; 6.5 and 6.7 stopped receiving fixes in 2022 and carried the ESXiArgs wave.
Security · Aug 2026
Confluence Server End of Life: Two Years Past Support, Three Exploited CVEs, and No Patch Ever Coming
Confluence Server reached end of life February 15, 2024. Three CISA KEV-listed CVEs — including CVSS 10.0 CVE-2023-22518, mass-ransomed since November 2023 — have fixes only on supported branches.
Security · Aug 2026
The TeamCity RCE Under Active Exploitation Will Never Be Patched on Nine Version Lines — CVE-2026-63077
CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity added to CISA KEV on August 5, 2026, is fixed only in 2025.11.7 and 2026.1.3. Nine EOL version lines will never receive the fix.
Security · Aug 2026
The ActiveMQ RCE on CISA's KEV Will Never Be Patched on Five Version Lines — CVE-2026-34197
CVE-2026-34197, the exploited ActiveMQ RCE via the Jolokia JMX-HTTP bridge (effectively unauthenticated on 6.0/6.1), is fixed only in 5.19.4 and 6.2.3 — five EOL lines (5.16–5.18, 6.0, 6.1) will never receive the patch.
Security · Aug 2026
The Roundcube RCE on CISA's KEV List Will Never Be Patched on 1.4, 1.3, or 1.2 — CVE-2025-49113
CVE-2025-49113, the KEV-listed deserialization RCE in Roundcube Webmail, is fixed only in 1.5.10 and 1.6.11 — the EOL 1.4, 1.3, and 1.2 lines will never receive a patch, leaving upgrade or decommission as the only fixes.
OS · Aug 2026
VMware Cloud Foundation End of Life: 4.x Is Dead, 5.x Ends in 2027, VCF 9.0 Barely Outlasts 5.2
Every VMware Cloud Foundation 4.x release is already end of life — 4.5.2, the last of the line, ended October 2, 2025. VCF 5.0 and 5.1 both die June 1, 2027; 5.2 follows October 11, 2027.
Risk Intelligence · Aug 2026
What Extended Support Actually Costs: The Cross-Vendor Pricing Reference for Post-EOL Software
The first cross-vendor pricing reference for post-EOL extended support. Microsoft ESU: $61/device doubling yearly ($30 one-time for consumers). AWS: EKS $0.60/cluster-hour (6x), RDS $0.100/vCPU-hour doubling in year three.
Framework · Aug 2026
IBM MQ End of Support: Every Date Lands on September 30 — 9.2 Crossed Last Year, 9.3 Is Next, and 9.4 Has No Date Yet
IBM MQ 9.3 end of support is September 30, 2027 (extended support to 2031) — and MQ 9.2's standard support already ended September 30, 2025.
Risk Intelligence · Aug 2026
Palo Alto End of Life Has Two Clocks: Every PAN-OS Software Date, the Hardware Dates People Actually Search For, and Why 11.0 Died Before 10.2
Palo Alto publishes software EOL per PAN-OS release and hardware EOL per appliance, on two different pages. PAN-OS 11.2 dies May 2, 2027 — one day before the older 11.1 — and 10.2 already passed August 27, 2025.
Framework · Aug 2026
Oracle 19c End of Support Date: December 31, 2029 — a Date That Already Moved Once, and the Trap Waiting in 21c
Oracle Database 19c Premier Support ends December 31, 2029, with Extended Support to December 31, 2032 — dates Oracle extended in November 2024 from the original April 2024/2027 schedule.
OS · Aug 2026
IBM i End of Life: 7.4 Standard Support Ended September 30, 2026 — and Whether You Call It AS/400, iSeries, or IBM i, the Clock Is the Same
IBM i 7.4 reached end of standard support September 30, 2026 — the same day as Oracle JDK 17 Premier and FortiOS 7.2, and the day 7.3's first Service Extension window closed.
Compliance · Aug 2026
Is TLS 1.2 End of Life? No — the Full TLS Protocol Lifecycle: What Died in 2021, What Shipped in 2018, and What Compliance Actually Requires
TLS 1.2 is not end of life — no standards body has deprecated it, and NIST SP 800-52r2 and PCI DSS both permit it today. The dead versions are TLS 1.0 and 1.1: deprecated March 2021 by RFC 8996 (MUST NOT be used), removed from…
Risk Intelligence · Aug 2026
NetApp ONTAP End of Life: Every Version's Support Dates — and Why the Patch Cliff Comes Two Years Before "End of Support"
NetApp supports each ONTAP release for 3 years of full support — then 2 years of limited support that ships no patches of any kind. ONTAP 9.13.1 crossed the patch cliff June 30, 2026; 9.14.1 ends January 31, 2027;
OS · Aug 2026
Oracle Solaris End of Life: Sun Died in 2010, the Dates Run to 2037 — and the Real Deadline Is January 2027
Oracle Solaris 11.4 is supported to November 2031 (Premier) and November 2037 (Extended) per Oracle's Lifetime Support Policy
Compliance · Aug 2026
How to Build a Software EOL Management Program (That Survives an Audit)
The software end-of-life management process in six steps, each built on our published research: inventory the six places EOL software hides (appliances, FROM lines, CI runners, cloud services, the RMM console itself) and the…
OS · Aug 2026
What Is the Latest Android Version? Android 17 — Every Version and Its Support Status
The latest Android version is Android 17 (Cinnamon Bun), released June 16, 2026. Android 14, 15, 16 and 17 still receive Google security patches; Android 13 and older do not. The complete table of all 34 Android versions
OS · Aug 2026
Proxmox VE 8 End of Life Is August 31, 2026 — the First Proxmox Deadline Most VMware Refugees Have Ever Faced
Proxmox VE 8 reached end of life August 31, 2026 — no extended support, no LTS: Proxmox supports each release at least as long as its Debian base has Debian Security Team coverage, and Debian 12 crossed that line July 12, 2026.
OS · Aug 2026
Is RHEL 8.10 / 9.4 / 9.6 / 9.7 Still Supported? The Minor-Version Trap in Red Hat's 10-Year Lifecycle
RHEL 8 is supported until May 31, 2029 — and a RHEL 8.6 box has received zero patches since November 9, 2022 unless it carried EUS. Only the latest minor of each major (8.10, 9.8, 10.2) rides the standard patch stream;
OS · Aug 2026
RHEL 8・RHEL 9 のサポート期限はいつまで？RHEL ライフサイクル完全ガイド【2026年版】
RHEL 8 のサポート期限（メンテナンスサポート終了）は2029年5月31日、RHEL 9 は2032年5月31日。RHEL 7/8/9/10 の GA・フルサポート終了・EOL・ELS の日付を一覧表で整理し、最新マイナーリリースしかパッチを受け取れない「マイナーバージョンの罠」まで解説する日本語版 RHEL ライフサイクル完全ガイド。
Risk Intelligence · Aug 2026
Amazon EKS Version End of Life: 14 Months of Standard Support, Then the Bill Is the Notification — Every Version's Dates and the 6x Price
Amazon EKS supports each Kubernetes version for 14 months of standard support, then automatically enrolls clusters in extended support — no opt-in
Risk Intelligence · Aug 2026
Nutanix AOS 6.10 End of Life Is October 31, 2026 — the Last LTS Exits, and Its Maintenance Already Ended in January
Nutanix AOS 6.10 reaches End of Support Life October 31, 2026 — but its End of Maintenance already passed January 31, 2026, so the release has run on troubleshooting support with security fixes only for over six months.
Risk Intelligence · Aug 2026
MuleSoft's Support Treadmill: Mule 4.4 Has Been Fully Dead Since October — and 4.6 LTS Left Standard Support in August
Mule 4.4 — the runtime the 2021–2023 integration build-out standardized on — lost Extended Support October 8, 2025, yet stays among the most-asked-about versions in our data.
Risk Intelligence · Aug 2026
Zabbix End of Life: 7.4 Ends With 8.0 LTS, 6.0 LTS February 28, 2027
Zabbix 7.4 has no dated end of life: Zabbix says full support until 8.0 LTS ships, limited support to Q1 2027. 6.0 LTS: critical fixes to Feb 28, 2027.
Risk Intelligence · Aug 2026
Atlassian's Two-Year Treadmill: Every Jira and Confluence Data Center Version Dies Two Years After Its Own Release — and the Server Ghost Fleet Keeps Getting Ransomed
Atlassian supports each Jira and Confluence Data Center release for exactly two years from its own release date — Jira 10.0 died August 22, 2026 and Confluence 9.0 on July 30, 2026.
OS · Aug 2026
IBM AIX End of Life: "We Run 7.3" Is Not a Support Status — the Technology Level Clock, and the November 30 Deadline
AIX support expires per Technology Level, not per release: each TL gets fixes for 3 years per IBM's published policy. AIX 7.3 TL2 reaches End of Fix Support November 30, 2026, while TL3 runs to December 2027 and TL4 to December…
OS · Aug 2026
OpenShift 4.18 Maintenance Ended August 25, 2026 — Whether Patches Continue Depends on Your Subscription Tier
Red Hat OpenShift 4.18 exited maintenance support August 25, 2026. Patches don't stop for everyone: EUS continues to February 25, 2027 — included with Premium subscriptions, a paid add-on on Standard
Runtime · Aug 2026
Java 17's September 30, 2026 Deadline Is Oracle's, Not Java's — What Ends, What Already Ended, and Every Distribution's Real Date
September 30, 2026 ended Oracle Premier Support for JDK 17 — not free updates (Oracle's NFTC window closed September 2024) and not Java 17 itself.
Security · Aug 2026
GitLab 19.0 Stopped Receiving Security Patches on August 20 — and GitLab's Whole Support Window Is 91 Days Wide
GitLab 19.0 left the security-patch window August 20, 2026 — 91 days after it shipped. GitLab patches only the current monthly release and the two before it, so "we upgraded recently" and "we're supported" are different claims:…
Framework · Aug 2026
FortiOS 7.2 End of Support Is September 30, 2026 — and FortiOS 7.0 Already Showed What Comes After
FortiOS 7.2 reached End of Support September 30, 2026 — the end of even critical fixes, on a train that has been critical-fixes-only since engineering support ended March 31, 2025.
Risk Intelligence · Aug 2026
EOL 2026, the Mid-Year Report: The Year the Dates Got Dangerous — and Stopped Holding Still
The biggest end-of-life surprises of 2026 so far, every claim from a primary source: one in six vulnerabilities CISA confirmed as actively exploited this year is three-plus years old, FortiOS 7.0 became permanently unpatchable…
AI Models · Aug 2026
The Assistants API Dies August 26 — on Azure and OpenAI Both. What Breaks, and What Doesn’t Migrate
Both Microsoft and OpenAI retire the Assistants API on August 26, 2026 — Azure moves to Foundry Agents, OpenAI to the Responses + Conversations APIs.
Security · Aug 2026
Every Jenkins LTS Except the Newest Is Now Permanently Vulnerable — CVE-2026-70426
CVE-2026-70426, a critical deserialization bypass allowing remote code execution on the Jenkins controller, is fixed only in 2.576 and LTS 2.568.2. Under Jenkins’s rolling-LTS policy, every older LTS line — 2.555 and back
Security · Aug 2026
Quarkus Authorization Bypass (CVE-2026-39852): The Fix That 50+ EOL Versions Will Never Get
A CVSS 8.2 authorization bypass in Quarkus is fixed in current releases — but 55 of the 58 Quarkus release lines we track are past end of life, and the entire 2.x family will never see the patch.
Compliance · Aug 2026
Is Your MSP Billing You to Patch Software That Has No Patches?
CISA says attackers are exploiting N-able N-central right now — and legacy consoles can't take the fix until they migrate to a supported version first.
Risk Intelligence · Aug 2026
OpenEoX: Big Tech Is Standardizing Machine-Readable EOL Data — We Read the Draft and Filed Comments
Cisco, Microsoft, Oracle, Red Hat, IBM — with CISA and the NSA at the table — are writing OpenEoX, the OASIS standard for machine-readable end-of-life data. Its public review ran until August 13, 2026.
OS · Aug 2026
Debian 11 LTS Ended August 31, 2026 — and Bullseye Runs the Boxes Nobody Remembers
Debian 11 (Bullseye) LTS ended August 31, 2026 — since then, no free security updates at all; only paid Extended LTS (Freexian, listed through June 30, 2031) continues. Why five-year-old Bullseye installs are the forgotten ones
Security · Aug 2026
AWS Quietly Moved Lambda's Runtime Cutoffs to 2027. The Security Clock Didn't Move.
AWS pushed the operational blocks for its entire old-runtime cohort — Node.js 16/18/20, Python 3.8/3.9, Ruby 3.2, .NET 6 and provided.al2
Risk Intelligence · Aug 2026
Citrix Virtual Apps and Desktops 2203 End of Life: March 23, 2027 — LTSR Dates, Extended Support & Migration
Citrix Virtual Apps and Desktops 2203 LTSR reaches end of life March 23, 2027 — the end of its five-year mainstream window.
OS · Aug 2026
Horizon End of Life: Every VMware / Omnissa Horizon 8 Version's Support Dates
Horizon 7 is fully out of support since April 2025; Horizon 8 — now Omnissa Horizon — is alive, but every release runs a three-year clock. 2303, 2306 and the 2212 ESB all expired in 2026; 2309 ended October 26, 2026.
Framework · Jul 2026
Nuxt 3 End of Life: EOL Date, Risk, and Migration to Nuxt 4
Nuxt 3 reached end of life on July 31, 2026 after a six-month extension. Nuxt 3.21.10 was the final release. The EOL Risk Score, what stops shipping (including Nitro and h3), why Nuxt 4 has no fixed EOL date, and extended-support…
Database · Jul 2026
AWS Is Now Charging for MySQL 8.0. Here's What It Costs.
Amazon RDS for MySQL 8.0 reached end of standard support July 31, 2026, and RDS Extended Support charges began the next day. Enrollment is automatic unless it was explicitly disabled at instance creation.
Security · Jul 2026
The First AI-Run Ransomware Attack Used Zero Zero-Days
JADEPUFFER is the first ransomware intrusion documented as run end-to-end by an autonomous LLM agent. It needed no novel exploit: it entered through a Langflow flaw patched in March 2025, walked past a storage service still using…
OS · Jul 2026
RHEL 10 End of Life: Full Support to 2030, Maintenance to 2035 — Every Phase Dated
RHEL 10 (released May 20, 2025): full support ends May 31, 2030, maintenance ends May 31, 2035, ELS beyond. Every RHEL version's three lifecycle phases in one table, and the nearer deadline most teams miss
OS · Jul 2026
CentOS to RHEL: Version Mapping, Convert2RHEL, and When It's the Wrong Move
convert2rhel supports CentOS Linux 7.9 and 8.5 (and AlmaLinux/Rocky/Oracle Linux) — but NOT CentOS Stream. Which version lands where, the underrated CentOS 7 → RHEL 7 ELS play, and the cases where conversion is the wrong move.
Risk Intelligence · Jul 2026
IBM End-of-Life Dates: The Complete Enterprise Matrix
Every IBM enterprise end-of-support date in one place: z/OS 2.5 and IBM i 7.4 both died September 30, 2026, Db2 11.5 follows April 30, 2027, and AIX 7.3 TLs roll off from November 2026.
Security · Jul 2026
Exploited at CVSS 10.0 — and the Vendor Never Checked Whether EOL Versions Are Affected
Arista's advisory for the actively exploited VeloCloud Orchestrator flaw (CVE-2026-16812, CVSS 10.0) contains one line most readers skip: "End of support software versions have not been assessed." What that means if you run an…
Risk Intelligence · Jul 2026
CISA's 2026 Directives, Plainly: Patch by Risk (BOD 26-04) and Get EOL Off the Edge (BOD 26-02)
CISA now mandates risk-based patching (BOD 26-04: 3-day deadlines for exposed+exploited+automatable+total-control) and eviction of end-of-support edge devices (BOD 26-02).
Framework · Jul 2026
OpenSSL 3.0 End of Life: September 7, 2026 — What Actually Breaks, and What Doesn't
OpenSSL 3.0 died September 7, 2026 — four days before EU CRA reporting began. Who is actually exposed (bundled copies, not distro packages), the autumn EOL pile-up, and why 3.0→3.5 LTS is easier than feared.
Runtime · Jul 2026
Java End-of-Life Dates by Vendor: Why "When Does Java 17 Die?" Has Eight Different Answers
There is no single Java EOL date. Oracle JDK 17 Premier Support ended September 30, 2026 (Extended Support fee waived to September 2029), Oracle JDK 21's free-use updates ended the same month, Red Hat's OpenJDK 8 ends November…
Risk Intelligence · Jul 2026
Oracle Shipped 1,449 Patches. On Out-of-Support Versions, It Didn't Even Look.
Oracle's July 2026 Critical Patch Update is its largest ever — 1,449 security patches, roughly 1,235 unique CVEs. Oracle's own advisory says releases outside Premier or Extended Support are not tested for those vulnerabilities,…
Security · Jul 2026
The Next SharePoint 9.8 Arrived in Eight Days — CVE-2026-50522 Is Now Under Attack
CVE-2026-50522, a CVSS 9.8 SharePoint remote code execution flaw, went from public proof-of-concept to active exploitation and onto CISA's Known Exploited Vulnerabilities list on July 22, 2026.
OS · Jul 2026
Android End of Life: Every Version's Support Status and EOL Date
Android 13 reached end of life March 2, 2026 — Android 14, 15, 16 and 17 remain supported. The complete Android version EOL table, how Google's security bulletins work, and why your device's clock differs from the OS clock.
AI Models · Jul 2026
Samsung Galaxy End of Life: The Complete EOL List, Model by Model
The complete Samsung Galaxy end-of-life list: all 437 tracked devices with release and security-update end dates — S series, foldables, Note, A/M/F/J and more. 323 are already past end of support; recent flagships get 7 years.
OS · Jul 2026
macOS End of Life: Every Version, and Apple's Unwritten Support Rule
Apple supports the current macOS plus two — macOS 13 Ventura died September 15, 2025. Every macOS version's EOL date, the unwritten September rule, and the Intel Mac hardware catch.
OS · Jul 2026
iOS End of Life: Which iPhone and iPad Versions Still Get Updates
Apple publishes no iOS lifecycle calendar — patches just stop. iOS 26 and 18 are fully supported; iOS 15/16 get unpredictable emergency fixes; iOS 12's final patch came January 2026. Every version's dates.
Risk Intelligence · Jul 2026
Microsoft Office End of Life: 2016, 2019 and 2021 Are Out of Support
Office 2016 and 2019 both hit end of support October 14, 2025. Office 2021 followed on October 13, 2026, the same day Windows 10's first commercial ESU year ended. Every Office release's dates, and why there is no ESU for Office.
AI Models · Jul 2026
iPad End of Life: How Long Every Model Gets Updates
iPads get updates for 5–8 years, but Apple never announces the end date — support follows the chip, and models die in cohorts. Every iPad model's status and when to retire it from sensitive use.
OS · Jul 2026
Oracle Linux End of Life: Premier vs Extended Support, Every Version
Oracle Linux 7 left premier support December 31, 2024 — extended support runs to June 2028. OL8 to July 2029, OL9 to June 2032. Every version's dates and why Oracle's clock differs from RHEL's.
Risk Intelligence · Jul 2026
Splunk End of Life: The Two-Year Clock on Every Version
Splunk Enterprise versions get almost exactly two years of support. 9.3 died July 24, 2026; 9.4 follows December 16, 2026 — then all of 9.x is gone. Every version's dates and how to live with the two-year clock.
Database · Jul 2026
IBM Db2 End of Life: 11.5's 2027 Deadline and Every Version's Dates
Db2 11.5 — the version most estates run — dies April 30, 2027, and Db2 12.1 is the only successor. Every version's dates, IBM's predictable April-30 rhythm, and why 2026 is the assessment year.
Framework · Jul 2026
PostgreSQL 14 End of Life: November 12, 2026 — the Clock Is Running
PostgreSQL 14 dies November 12, 2026 — no more security or data-corruption fixes, per the exact five-year November rhythm. Every version's dates, why to target 16/17 not 15, and what to do if November is impossible.
Framework · Jul 2026
Magento Release History and End of Life: Every Version, Every Date
Magento 2.4.9 (May 12, 2026) is the current version. 2.4.6 lost standard support August 11, 2026, and 2.4.5's extended window closed August 12.
AI Models · Jul 2026
Microsoft Surface End of Life: Every Model's Drop-Dead Date
Microsoft publishes an exact end-of-servicing date for every Surface — about six years per model. Every device's date, the firmware-vs-Windows distinction, and the Windows 10 double cutoff.
OS · Jul 2026
Windows Server End of Life Dates: 2016 Ends January 12, 2027
Windows Server 2016 extended support ends January 12, 2027; 2012 R2 ESU and 2022 mainstream support ended October 13, 2026. Every version.
OS · Jul 2026
Debian 11 End of Life: The August 31 LTS Cutoff, and What "End" Actually Means
Debian 11 Bullseye's LTS ended August 31, 2026. The three support tiers explained (standard, LTS, paid ELTS), why upgrading to 12 buys less than it sounds, and the container FROM-line catch.
Compliance · Jul 2026
Your Docker Base Images Are Quietly Dead: The FROM-Line Audit Nobody Runs
debian:10, ubuntu:20.04, node:18-alpine — these tags still pull and build, but the OS inside stopped getting security patches.
Security · Jul 2026
SharePoint 2016 and 2019 Left Support With a Patch for a Flaw Under Attack. Then Microsoft Patched Them Again
SharePoint Server 2016 and 2019 reached end of support on July 14, 2026, the same day Microsoft patched CVE-2026-58644, a CVSS 9.8 remote code execution flaw already exploited in the wild.
Risk Intelligence · Jul 2026
AWS Is Quietly Retiring 20+ Services. The Door Closes July 30. Here's the Full List.
AWS's June 30 announcement is its largest coordinated service retirement ever: ~20 services including Kendra, Q Business and Bedrock Agents Classic close to new customers July 30, 2026;
Risk Intelligence · Jul 2026
EOL Dates Drift: What We Found Cross-Checking 54 Products Against Their Vendors
Original research: we cross-checked 54 products against official vendor lifecycle documentation. 33 verified exactly, 12 dates corrected, 7 products have no vendor-published dates at all
Security · Jul 2026
Gold Eagle Can't Patch What Nobody Maintains: The EOL Hole in the White House's New Vulnerability Pipeline
The White House's Gold Eagle clearinghouse launched July 14 to coordinate AI-discovered vulnerabilities at machine speed — 35,364 CVEs landed in H1 2026 alone.
Risk Intelligence · Jul 2026
EOL Dates Were Written for Humans. Their Next Reader Is a Machine.
Open source EOL dates are becoming machine-read infrastructure: AI agents query them, regulators mandate them, insurers underwrite on them. What AI actually changes about software lifecycles — and what it can't
Compliance · Jul 2026
The EU Cyber Resilience Act Has an EOL Problem — and the Clock Started in 2024
The CRA's vulnerability reporting obligations begin September 11, 2026 — over a year before the main obligations everyone plans around.
Compliance · Jul 2026
NIS2 and End-of-Life Software: The Patching Obligation You Can't Meet With Dead Components
NIS2 requires vulnerability handling — but an end-of-life component has no patches to apply. What the directive asks of essential and important entities, why EOL software breaks it, and the management-accountability angle that…
Compliance · Jul 2026
DORA Names Legacy Systems Directly: What Financial Entities Must Do About End-of-Life ICT
DORA has applied since January 17, 2025 — and it names legacy ICT systems explicitly. Why end-of-life components are the purest form of the risk it regulates, and the lifecycle process a financial entity's ICT risk framework can…
Runtime · Jul 2026
Java Support Deadlines and the Oracle Licensing Trap: What Actually Runs Out, and When
Oracle JDK 8 support ended March 2022, JDK 11 in September 2023, and JDK 17 lost support September 30, 2026. How Oracle's per-employee licensing turned old Java into audit exposure, and the OpenJDK escape path.
Risk Intelligence · Jul 2026
The H2 2026 EOL Pileup: Seven Major Deadlines in Six Months
OpenSSL 3.0, Oracle JDK 17, Windows Server 2012 ESU, Python 3.10, .NET 8 and 9, PostgreSQL 14, and PHP 8.2 all reach end of life between September and December 2026.
Risk Intelligence · Jul 2026
The Cyber-Insurance Question You Can't Answer: Do You Run Unsupported Software?
Cyber-insurance questionnaires increasingly ask about end-of-life software — and most organizations genuinely don't know their answer.
Risk Intelligence · Jul 2026
The Software Lifespan Study: We Measured 7,144 Versions — the Median Lives 18 Months
Original research from the endoflife.ai dataset: across 463 products and 7,144 versions, the median supported lifespan is just 1.5 years.
OS · Jul 2026
How to Migrate Off Windows 10: The Post-EOL Playbook (2026)
Windows 10 reached end of life October 14, 2025, and consumer Extended Security Updates run only to October 2026. The migration paths to Windows 11 — hardware checks, in-place upgrade, and what to do with ineligible machines.
OS · Jul 2026
CentOS 7 Migration Guide: Your Options in 2026
CentOS 7 reached end of life June 30, 2024. Two years on, the realistic paths: in-place conversion to Rocky Linux or AlmaLinux, a move to RHEL, or extended support while you plan the migration.
Runtime · Jul 2026
Migrating Off PHP 7: A Practical Upgrade Path to 8.x
PHP 7.4 reached end of life November 28, 2022, yet PHP 7 still runs across production. The practical upgrade path to PHP 8.x — breaking changes, tooling, and how to sequence the jump.
Runtime · Jul 2026
Node.js 18 End of Life: Upgrade Guide to Node.js 22 and 24 LTS
Node.js 18 reached end of life on April 30, 2025 — and Node 20 followed on April 30, 2026.
Framework · Jul 2026
AngularJS Is Long Dead: Migration Options That Actually Work in 2026
AngularJS reached end of life December 31, 2021. The migration options that actually work in 2026 — incremental rewrites to Angular, moving to another framework, and extended support as a bridge.
OS · Jul 2026
Exchange Server 2016 & 2019 EOL: Final ESU Window Ends October 2026
Exchange 2016 and 2019 ended extended support October 14, 2025, and the last ESU window closes in 2026 with Microsoft stating no further extensions.
Runtime · Jul 2026
.NET 8 End of Life (EOL) and End of Support: November 10, 2026
.NET 8 end of life (EOL) and end of support is November 10, 2026, the same day as .NET 9. Is .NET 8 LTS, what stops that day, and the move to .NET 10.
OS · Jul 2026
Windows Server 2012 R2 End of Life: ESU Ended October 13, 2026
Windows Server 2012 and 2012 R2 reached end of life October 10, 2023; the last ESU year ended October 13, 2026, on-premises and on Azure. Every date.
OS · Jul 2026
VMware ESXi & vSphere End of Life in the Broadcom Era: Every Support Date
vSphere 7.x general support ended October 2, 2025, perpetual licenses are gone, and every ESXi version now runs on a subscription clock.
OS · Jun 2026
Ubuntu 25.10 End of Life: July 1, 2026 — What to Do Now That the Deadline Has Passed
Ubuntu 25.10 (Questing Quokka) reached end of life on July 1, 2026. No more security patches since that date. Upgrade path, who is affected, and everything to do before the deadline.
Runtime · Apr 2026
Node.js 14 End of Life — April 30, 2023: Are You Still Running It?
Node.js 14 reached end of life April 30, 2023. No more CVE patches, no security fixes. Your risk score, the vulnerabilities you are exposed to, and how to upgrade.
Runtime · Feb 2026
PHP 7 and Node.js 16: The Ghost Versions Still Running in Production
PHP 7.x and Node.js 16 are still running on millions of production servers years after EOL. What that means for your security posture.
EOL — Dec 31, 2022
Bootstrap End of Life — EOL Dates & the jQuery Problem
Bootstrap 5 is maintained; Bootstrap 2, 3, and 4 are all EOL — and Bootstrap 3/4 drag end-of-life jQuery (and its known XSS) along with them. Every version's EOL date, the real risk, and the path to Bootstrap 5.
EOL — LTS cadence
Ember.js End of Life — The LTS Cadence & Every EOL Date
Ember 6.4 LTS reached EOL June 21, 2026; everything 5.x and earlier — including the common 3.28 LTS — is end of life. The LTS schedule, the Octane shift that stranded 3.x apps, and the ember-cli-update path.
Is jQuery dead?
jQuery End of Life — What's Actually EOL (and What Isn't)
jQuery core isn't dead — but jQuery 1.x/2.x got no updates since 2016, jQuery UI hit EOL Aug 5 2024, and any jQuery below 3.5.0 ships known XSS CVEs. The honest breakdown and the fix via jQuery Migrate.
EOL — every 6 months
Angular End of Life — The 18-Month Treadmill & Every EOL Date
Angular 19 reached EOL May 18, 2026 — only 20 and 21 are supported. Why Angular apps fall behind faster than any framework, every version's EOL date and Risk Score, the ng update path, and extended support for stranded apps.
EOL — Dec 31, 2023
Vue 2 End of Life — Risk & Migration to Vue 3
Vue 2 reached EOL December 31, 2023 — no more security patches. Every version's EOL date and Risk Score, why client-side EOL is a real threat, the Vue 3 migration path via @vue/compat, and extended-support options.
New · 2026 Reference
Software EOL Dates 2026 — The 100+ Most-Searched Versions in One Reference
Every date that matters in one page: 124 versions across 44 products — Windows, Ubuntu, Debian, RHEL, Node.js, Python, PHP, Java, PostgreSQL, Kubernetes, Spring Boot, and more. Regenerated at every deploy.
EOL — Nov 10, 2026
.NET End-of-Life Dates — .NET 8 & 9 Both EOL November 10, 2026
.NET 8 is LTS — but LTS is only 3 years, and it reaches EOL the same day as .NET 9. .NET 6 and 7 are already dead. The full schedule, the LTS-vs-STS trap, and the migration path to .NET 10.
New · Start Here
What Is EOL Software? Every Term, Acronym & Concept Explained
The plain-English foundation: what EOL, EOS, LTS, and CVE actually mean, what runtimes, frameworks, and libraries are, how version numbers work, and why support dates matter — assuming zero prior knowledge.
EOL Watch · July 14 Triple Cutoff
SharePoint 2016 & 2019 End of Life — and SQL Server 2016 Joins Them
Three Microsoft server products reached end of support on one day: July 14, 2026. No ESU for SharePoint, paid ESU terms for SQL Server 2016 to 2029, and the options table for on-prem shops with no perpetual-license version left to hop to.
EOL Watch · All Coverage
EOL Watch: every deadline we've covered
The full news section — day-of coverage of every major software end-of-life event, verified against vendor lifecycle sources. SharePoint, SQL Server, Windows Server, VMware, .NET, Exchange and more.
EOL Watch · SQL Server 2016 deep-dive →
SQL Server 2016 End of Life: The ESU Runway to 2029
Support ended July 14, 2026. The full breakdown: the three-year ESU decision math, the Azure Arc / Software Assurance purchase mechanics, the editions that get nothing (Express, Web, Developer), and every migration path.
EOL Watch
Debian 12 Regular Support Ended — Your Real Situation
Bookworm's regular security support ended July 12, 2026; LTS runs to June 30, 2028. What stops today, the Debian LTS coverage trap, the Debian 11 double-deadline seven weeks out, and your three paths forward — ranked honestly.
EOL Watch · June 30 Wave
Four Spring Projects Went EOL on One Day
Spring Boot 3.5, Framework 6.2, Security 6.5, and Cloud 2025.0 all left open-source support on June 30 — and 3.5 was the last 3.x release. Why the whole stack ends at once, and what teams on 3.x do now.
New · Start Here
What Is a CVE? Vulnerability IDs, CVSS, KEV & EPSS Explained
CVEs are recall notices for software. Who assigns the IDs, what CVSS scores really mean (and how they mislead), why CISA's KEV list outranks everything, the hour-by-hour life of a CVE — and why EOL software turns them into permanent exposure.
New · Start Here
Runtime vs Framework vs Library CVEs — Why the Layer Changes Everything
The same CVSS score, three different emergencies. How Struts broke Equifax, why Spring4Shell punished EOL stragglers, what Log4Shell taught everyone about transitive dependencies — and who actually ships the fix at each layer of your stack.
New · Start Here
What Is LTS? Long-Term Support Explained — Windows, Rhythms & the Trap
LTS promises a defined window, not immortality. The release rhythms of Node, Java, Ubuntu, and .NET, why vendors split their release trains, the planning mistake that catches almost everyone — and how to upgrade in calm instead of panic.
New · Start Here
What Is a Dependency? Transitive Packages, Lockfiles & SBOMs Explained
Modern software is mostly other people's software. How one manifest line becomes a thousand packages on disk, what lockfiles actually record, the day eleven lines of code broke the internet — and the one-hour question Log4Shell taught everyone to answer.
New · Start Here
The Day After EOL — What Actually Happens When Software Support Ends
Nothing crashes on day zero — that's the trap. The real timeline of an EOL system: the vulnerability backlog, the ecosystem moving on, the compliance clock, and the four exits ranked by when to take them.
New · AI Model Lifecycle
GPT-3.5 Turbo Retirement — OpenAI Deprecation Dates & What Replaces It
GPT-3.5 Turbo is legacy: snapshot 0613 retired Sep 2024, 0301 deprecated Jun 2023. The retirement timeline, the GPT-4o mini migration checklist, and why model shutdowns are the EOL events of the AI stack.
AI Deprecation Timeline
AI Model Deprecation Dates 2026 — OpenAI, Gemini, Llama & Mistral
GPT-4 Turbo, Gemini 2.0, Llama 3, Mistral Large — all deprecated or on a countdown. The complete 2026 AI model deprecation timeline with exact shutdown dates, tracked across all four major providers.
EOL — May 2025
ROS Noetic End of Life — ROS 1 Is Over: Migration Guide to ROS 2
Noetic was the final ROS 1 distribution — its EOL ended the entire ROS 1 line. What that means for long-lived robot fleets, the double-EOL problem with Ubuntu 20.04, and the ros1_bridge migration path.
New · Product Update
Your EOL Dates Are Deadlines — Now They Live on Your Calendar
Add any product's end-of-life date to your calendar with reminders 90, 30 & 7 days out — and why PCI DSS, ISO 27001, SOC 2, HIPAA, NIST, and CISA all treat that lead time as a control, not a nicety.
Incident Guide
My Software Is EOL — What Do I Do Now?
Just found out your software is end-of-life? Understand your actual risk, the CVE blind spot your scanner is missing, and your four options — migrate, extended support, compensating controls, or risk acceptance.
⚠ EOL — Now in Effect
Debian 12 Bookworm EOL July 11, 2026 — What You Need to Do Now
Debian 12 reached end of life June 10. Who is at risk, the Docker base image checklist, compliance implications, and your step-by-step upgrade path to Debian 13 or LTS coverage.
Live Tool · CISA KEV
CVE Intelligence — EOL Software with Active CISA KEV Exposure
Every product in the CISA Known Exploited Vulnerabilities catalog cross-referenced against EOL status. Live Risk Scores, sortable by urgency. The CVE blind spot made visible.
EOL — April 30, 2025
Node.js 18 End of Life: Which Vendors Offer Extended Security Support?
Node.js 18 is end of life. No patches since April 2025. Compare extended lifecycle support vendors extended lifecycle support options — CVE coverage, compliance docs, and contract terms.
EOL — Dec 31, 2026
PHP 8.2 End of Life: December 31, 2026 — Migration Guide & Extended Support
PHP 8.2 is in security-only support until Dec 31, 2026. See the exact date, upgrade path to PHP 8.3, live countdown, and which vendors cover PHP 8.2 after end of life.
Ubuntu 20.04 EOL
Ubuntu End of Life Dates 2026 — Which Vendors Offer Extended Security Support?
Ubuntu 20.04 is already EOL. Ubuntu 22.04 reaches end of standard support April 2027. Full EOL date table and extended lifecycle support vendor comparison: Canonical ESM and third-party ELS vendors.
Operating System
Debian EOL Dates — Official Lifecycle Schedule for Every Version
Debian 12 regular support ended July 12, 2026 and Debian 11 LTS ended August 31, 2026. Debian 12 LTS runs to June 30, 2028. All three support phases — regular, LTS, and ELTS — explained with EOL Risk Scores and migration guidance for every version.
Operating System
RHEL End-of-Life Dates — Official EOL Schedule for Every Version
RHEL 7 fully EOL since June 2024. RHEL 8 in Maintenance Support until 2029. Full Support, Maintenance, Extended Life, and ELS phases explained with EOL Risk Scores.
Framework
Django End-of-Life Dates — Official EOL Schedule for Every Version
Django 4.2 LTS reached EOL April 7, 2026. LTS vs standard releases explained, Python compatibility matrix, EOL Risk Scores, and a step-by-step upgrade guide.
Database
PostgreSQL End-of-Life Dates — Official EOL Schedule for Every Version
PostgreSQL 14 reaches EOL November 12, 2026 — and 13 is already past it. The predictable 5-year policy explained, EOL Risk Scores, and a pg_upgrade migration guide.
Database
MySQL End-of-Life Dates — Official EOL Schedule for Every Version
MySQL 8.0 reached EOL April 30, 2026 — the default MySQL for 8 years. Innovation vs LTS explained, EOL Risk Scores, and a step-by-step upgrade guide.
Database
MariaDB End-of-Life Dates — Official EOL Schedule for Every Version
MariaDB 10.6 LTS reached EOL July 6, 2026; 10.11 LTS runs to February 16, 2028. LTS vs rolling releases explained, EOL Risk Scores, and a step-by-step upgrade guide.
Database
Oracle Database End-of-Life Dates — Premier & Extended Support for Every Version
Oracle 19c Premier Support runs to Dec 2029 (Extended to 2032). 18c, 12c, and 11g are all past support. Lifetime Support phases explained — plus the Sustaining Support CVE blind spot.
Framework
AngularJS End of Life — The Framework Died Dec 31, 2021
Every AngularJS version (1.0–1.8) reached EOL on the same day and there's no 1.9. The real risk level, AngularJS vs Angular, migration paths, and extended support options.
Framework
React End-of-Life Dates — What's Actually Supported in 2026
Meta doesn't publish hard React EOL dates. React 18 is security-only. React 17 and 16 are unsupported. Here's what that means and how to upgrade.
Infrastructure
Kubernetes End-of-Life Dates — Official EOL Schedule for Every Version
K8s 1.32 and 1.33 are EOL (1.33 ended June 28, 2026). K8s 1.34 reached end of life October 27, 2026. Official dates, EOL Risk Scores, EKS/GKE/AKS support windows, and a step-by-step upgrade guide.
Compliance
Hidden Compliance Risks from Unsupported Software
SOC 2, PCI DSS, HIPAA, and ISO 27001 all share one quiet vulnerability: unsupported software. Here's what your auditors will find — before you do.
Compliance
Your EOL Dependencies Are a Compliance Problem — Not Just Tech Debt
That outdated Node or Python version isn't just a "we should upgrade someday" item. If your company is going through SOC 2, PCI, or HIPAA, it's a finding waiting to happen.
Runtime
PHP End-of-Life Dates — Official EOL Schedule for Every Version
PHP 7.4, 8.0, and 8.1 are all currently EOL. PHP powers 77% of the web — making EOL PHP one of the most widespread security risks in the ecosystem. Official dates, scores, and migration guidance.
Framework
Spring Framework End-of-Life Dates — Official EOL Schedule for Every Version
Spring 5.3, 6.0, and 6.1 are all currently EOL. Three major versions unpatched simultaneously. Official dates, EOL Risk Scores, and migration guidance for every version.
Framework
Spring Boot End-of-Life Dates — Every Version EOL Guide (2.x, 3.x and 4.x)
Spring Boot 4.0 is current. Spring Boot 3.4 OSS support ended December 2025. Spring Boot 2.7 OSS ended June 2023 with commercial support to June 2029. Full dates, Java requirements, and migration guidance.
Networking
Cisco IOS XE End-of-Life Dates — Full Version EOL & EoS Guide (17.x)
IOS XE 17.9 and earlier are end of life. 17.15 is the current Long-Lived release. Full release train EOL dates, Standard vs Long-Lived explained, and upgrade commands for Catalyst 9000.
Security
The Security Blind Spot Nobody Is Talking About Enough
EOL software gets a clean bill of health from every CVE scanner. Here's why that's the most dangerous gap in enterprise security — and what we built to close it.
Runtime
Node.js End-of-Life Dates — Official EOL Schedule for Every Version
Node.js 14, 16, 18, and 20 are all EOL. Official dates, EOL Risk Scores, breaking changes, and a 5-step migration guide for every version.
Runtime
Python End-of-Life Dates — Official EOL Schedule for Every Version
Python 3.10 reached EOL on October 1, 2026; 3.11 follows in October 2027. Official dates, EOL Risk Scores, and migration guidance for every Python version.
Risk Intelligence
The EOL Risk Score: Why CISOs and DevOps Teams Are Measuring Software Risk Wrong
Your vulnerability scanner gives EOL packages a clean bill of health. That silence is not safety — it is a measurement failure. Here is the metric that fills the gap.
Risk Intelligence
The EOL Risk Score™ Explained: What It Is, How It Works, and Why It Matters
A deep explainer on the EOL Risk Score™ — the five signals behind the score, how to read the bands, real-world use cases for security teams, DevOps, CISOs, and auditors.
2026 EOL Report
The Top 50 Products Reaching End of Life in 2026
The definitive list — 50 products, exact dates, CVE risk ratings, and migration guidance. Updated quarterly.
Security
The CVE Blind Spot: Why EOL Software Is More Dangerous Than a Zero-Day
With a zero-day, nobody knows. With EOL software, the attacker knows and you don't. Here's why that asymmetry is the most dangerous gap in enterprise security.
IT Security
Windows 10 End of Life: The Complete Migration Guide for IT Teams
Windows 10 reached EOL October 14, 2025. Millions of enterprise machines are running unpatched. Here is what you need to do now.
Open Source
The 2026 EOL Calendar: Every Major Runtime and Framework
Python, Node.js, PHP, Ruby, Java LTS — every major platform support window in one place, updated quarterly.
Enterprise
The Hidden Cost of Running EOL Software: A CISO's Risk Framework
Unsupported software is not just technical debt. It is a material security risk. Here is how to quantify it and present it to your board.
Hardware
EOSL for Enterprise Hardware: Cisco, HPE, Dell EMC Timelines
When your storage arrays and network gear hit end-of-service-life, the security clock starts. A vendor-by-vendor breakdown of critical dates.
Compliance
Why Your EOL Risk Score Is the Most Important Number in Your Security Stack
What the EOL Risk Score™ measures, how it maps to SOC 2, ISO 27001, and PCI DSS, and the real-world consequences — Equifax, MOVEit, Log4Shell — of ignoring it.
EOL — Dec 31, 2025
Apache Tomcat End of Life: Tomcat 9 EOL, Migration to Tomcat 10/11
Tomcat 9 reached end of life December 31, 2025. The javax.* to jakarta.* namespace break is why teams stay stuck. EOL Risk Scores for every Tomcat version and a step-by-step migration guide.
EOL — Feb 1, 2025
Veeam Backup & Replication End of Life: Version EOL Dates & Compliance Risk
Veeam 11 is EOL. Veeam 12.0 is EOL. Running unsupported backup software means unpatched CVEs and potential audit findings under SOC 2, PCI DSS, and ISO 27001.
All Versions EOL
CentOS End of Life: CentOS 7 & 8 Are EOL — Migration to AlmaLinux, Rocky, RHEL
CentOS 7 EOL June 2024. CentOS 8 EOL December 2021. No supported CentOS Linux versions remain. Migration options, in-place conversion tools, and EOL Risk Scores for every version.
EOL — Apr 1, 2025
Ruby on Rails End of Life: Every Version EOL Date & Upgrade Guide
Rails 6.1 EOL June 2024. Rails 7.0 EOL April 2025. Only Rails 7.1, 7.2, and 8.0 receive patches today. EOL Risk Scores and the Rails maintenance policy explained.
EOL — Apr 2026
Apache Kafka End of Life: Version EOL Dates & KRaft Migration Guide
Kafka releases EOL every 4 months. Kafka 3.6 reached EOL April 2026. EOL dates and Risk Scores for every Kafka version, plus the ZooKeeper deprecation and KRaft migration guide.
Developer API — Live
Integrate EOL intelligence into your stack
Free to check any product, no account needed. For production use, the API, larger batches, SBOM enrichment and the MCP server are covered by a paid key from $89 a month.
Get an API key →
Free key · Starter $89/mo · Pro $199/mo · Enterprise custom
Know before your scanner does
The Monthly EOL Digest™
Once a month — the most critical end-of-life dates, CVE blind spots, and lifecycle changes worth knowing about. Curated from endoflife.date, vendor advisories, and CISA KEV. Signal, not noise.
Monthly cadence. AI-curated, human-reviewed. Unsubscribe anytime. We never sell your data.