Complete end-of-life dates, support windows, and security status for all Cisco iOS Xe versions. Data sourced from endoflife.date and official vendor documentation. Updated at every deploy.
| Version | Latest Release | Release Date | EOL Date | Days | Status |
|---|---|---|---|---|---|
| 16.12 LTS | — | Jul 31, 2019 | Jul 31, 2023 | 1013 days past EOL | EOL |
| 17.1 | — | Nov 21, 2019 | Nov 21, 2020 | 1995 days past EOL | EOL |
| 17.2 | — | Mar 30, 2020 | Mar 30, 2021 | 1866 days past EOL | EOL |
| 17.3 LTS | — | Jul 31, 2020 | Jul 31, 2024 | 647 days past EOL | EOL |
| 17.4 | — | Nov 30, 2020 | Nov 30, 2021 | 1621 days past EOL | EOL |
| 17.5 | — | Mar 31, 2021 | Mar 31, 2022 | 1500 days past EOL | EOL |
| 17.6 LTS | — | Jul 30, 2021 | Jul 30, 2024 | 648 days past EOL | EOL |
| 17.7 | — | Nov 30, 2021 | Nov 30, 2022 | 1256 days past EOL | EOL |
| 17.8 | — | Apr 11, 2022 | Apr 11, 2023 | 1124 days past EOL | EOL |
| 17.9 LTS | — | Jul 29, 2022 | Jul 29, 2026 | 81 days remaining | Warning |
| 17.10 | — | Nov 30, 2022 | Nov 30, 2023 | 891 days past EOL | EOL |
| 17.11 | — | Mar 28, 2023 | Mar 28, 2024 | 772 days past EOL | EOL |
| 17.12 LTS | — | Jul 28, 2023 | Jul 28, 2027 | 445 days remaining | Active |
| 17.13 | — | Nov 30, 2023 | Nov 30, 2024 | 525 days past EOL | EOL |
| 17.14 | — | Apr 13, 2024 | Apr 13, 2025 | 391 days past EOL | EOL |
| 17.15 LTS | — | Aug 9, 2024 | Aug 9, 2028 | 823 days remaining | Active |
| 17.16 | — | Dec 11, 2024 | Dec 11, 2025 | 149 days past EOL | EOL |
| 17.17 | — | Mar 31, 2025 | Mar 31, 2026 | 39 days past EOL | EOL |
| 17.18 LTS | — | Aug 8, 2025 | Aug 8, 2029 | 1187 days remaining | Active |
When a Cisco iOS Xe version reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.
The CVE blind spot: Most vulnerability scanners check for known CVEs but do not flag the accumulation of unpatched vulnerabilities in EOL software. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no patch will ever exist. This is the most dangerous gap in enterprise security posture.
Organizations running EOL Cisco iOS Xe should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.
Upload requirements.txt, package.json, or Gemfile — full EOL report instantly.
Open Stack Scanner →