EOL Risk Index · rebuilt November 7, 2026
EOL Risk Index
The newest version of each enterprise product that is already past end of life, ranked by its EOL Risk Score. That is the version an estate one upgrade behind is most likely still running. Every date and score below comes from the same build that publishes this page, from vendor-checked lifecycle data (how dates are sourced).
333Products ranked
15Critical (76-100)
128High (51-75)
134With CISA KEV entries
50Median score
| # | Product | Newest version past EOL | End of life | Score | CISA KEV entries | Newest version: ends |
|---|---|---|---|---|---|---|
| 1 | .NET | 7 | May 14, 2024 | 90 | Yes | 10: November 14, 2028 |
| 2 | Redis | 7.0 | July 29, 2024 | 90 | Yes | 8.10: no end date published |
| 3 | RHEL | 7 | June 30, 2024 | 90 | Yes | 10: May 31, 2035 |
| 4 | Apache HTTP Server | 2.2 | July 11, 2017 | 80 | Yes | 2.4: no end date published |
| 5 | Apache Tomcat | 10.0 | October 31, 2022 | 80 | Yes | 11.0: no end date published |
| 6 | CentOS | 8 | December 31, 2021 | 80 | Yes | — |
| 7 | Cisco AnyConnect | 4.x | March 31, 2024 | 80 | Yes | — |
| 8 | Cisco IOS | 15.8 | December 14, 2022 | 80 | Yes | 15.9: July 27, 2029 |
| 9 | Elasticsearch | 9.3 | August 4, 2026 | 80 | Yes | 9.5: no end date published |
| 10 | Ivanti Cloud Services Appliance | 4.6 | August 31, 2024 | 80 | Yes | 5.0: no end date published |
| 11 | MongoDB | 8.2 | July 31, 2026 | 80 | Yes | 9.0: October 31, 2031 |
| 12 | Node.js | 25 | June 1, 2026 | 80 | Yes | 26: April 30, 2029 |
| 13 | PHP | 8.1 | December 31, 2025 | 80 | Yes | 8.5: December 31, 2029 |
| 14 | Windows Server | 23h2-ac | May 12, 2026 | 80 | Yes | 2025: November 14, 2034 |
| 15 | Zyxel NAS | NAS326 | December 31, 2023 | 80 | Yes | — |
| 16 | Cisco NX-OS | 10.2 | February 28, 2025 | 75 | Yes | 10.6: February 28, 2030 |
| 17 | Debian | 11 | August 31, 2026 | 75 | Yes | 13: June 30, 2030 |
| 18 | Ivanti Endpoint Manager (EPM) | 2022 | October 31, 2025 | 75 | Yes | 2024: no end date published |
| 19 | OpenSSL | 3.6 | November 1, 2026 | 75 | Yes | 4.1: November 23, 2027 |
| 20 | Windows | 11-24h2-w | October 13, 2026 | 75 | Yes | 11-26h2-e: October 9, 2029 |
| 21 | .NET Framework | 4.6.1 | April 26, 2022 | 70 | Yes | 4.8.1: no end date published |
| 22 | Adobe Experience Manager | 6.4 | April 30, 2021 | 70 | Yes | 6.5-lts: no end date published |
| 23 | Apache Log4j | 2.12 | December 14, 2021 | 70 | Yes | 2: no end date published |
| 24 | Apache Solr | 8 | October 25, 2024 | 70 | Yes | 10: no end date published |
| 25 | Apache Struts | 2.5 | April 30, 2024 | 70 | Yes | 7: no end date published |
| 26 | Cisco ASA | 9.19 | May 18, 2026 | 70 | Yes | 9.24: no end date published |
| 27 | Cisco Catalyst SD-WAN | 20.16 | January 13, 2026 | 70 | Yes | 26.1: no end date published |
| 28 | Cisco IOS XR | 7.7 | July 29, 2026 | 70 | Yes | 26.1: no end date published |
| 29 | Cisco Secure Firewall Management Center | 7.3 | May 18, 2026 | 70 | Yes | 10.0: no end date published |
| 30 | Cisco Secure Firewall Threat Defense (FTD) | 7.3 | May 18, 2026 | 70 | Yes | 10.0: no end date published |
| 31 | Cisco Unified Communications Manager | 14 | April 7, 2026 | 70 | Yes | 15: no end date published |
| 32 | Drupal | 11.2 | July 1, 2026 | 70 | Yes | 11.4: no end date published |
| 33 | IBM WebSphere Application Server | 8.0 | April 30, 2018 | 70 | Yes | 9.0: no end date published |
| 34 | Ivanti Endpoint Manager Mobile (EPMM) | 11.2 | March 15, 2022 | 70 | Yes | 12.10: no end date published |
| 35 | Juniper Junos OS | 23.1 | March 31, 2024 | 70 | Yes | 26.2: December 29, 2031 |
| 36 | NetScaler ADC | 13.0 | July 15, 2024 | 70 | Yes | 14.1: August 8, 2030 |
| 37 | Oracle ADF | 12.1 | December 31, 2017 | 70 | Yes | 14.1: December 31, 2030 |
| 38 | Oracle E-Business Suite | 12.1 | December 31, 2021 | 70 | Yes | 12.2: no end date published |
| 39 | Oracle Forms and Reports | 11.1.2 | December 31, 2016 | 70 | Yes | 14.1: December 31, 2030 |
| 40 | Oracle HTTP Server | 12.1 | December 31, 2017 | 70 | Yes | 14.1: December 31, 2030 |
| 41 | Oracle Identity and Access Management | 11.1.2 | December 31, 2020 | 70 | Yes | 14.1: December 31, 2030 |
| 42 | Oracle PeopleSoft | hcm-9.1 | September 30, 2014 | 70 | Yes | hcm-9.2: no end date published |
| 43 | Oracle Solaris | 11.3 | January 2021 | 70 | Yes | 11.4: November 2031 |
| 44 | Oracle WebLogic Server | 12.1 | December 31, 2017 | 70 | Yes | 15: October 31, 2030 |
| 45 | SAP NetWeaver | 7.4 | December 31, 2020 | 70 | Yes | 7.5: December 31, 2027 |
| 46 | SolarWinds Web Help Desk | 12.3 | September 12, 2019 | 70 | Yes | 2026.2: no end date published |
| 47 | Spring Framework | 6.2 | June 2026 | 70 | Yes | 7.0: July 2027 |
| 48 | Trend Micro Apex One | xg | March 31, 2021 | 70 | Yes | 2019: no end date published |
| 49 | Ubuntu | 25.10 | July 1, 2026 | 70 | Yes | 26.10: July 2027 |
| 50 | Veeam Backup & Replication | 11 | February 29, 2024 | 70 | Yes | 13: November 30, 2028 |
| 51 | Cisco Identity Services Engine | 3.2 | November 3, 2026 | 65 | Yes | 3.5: no end date published |
| 52 | Citrix Workspace app | 2203.1 | March 23, 2025 | 65 | Yes | 2607-hf1: October 6, 2029 |
| 53 | Commvault | 11.38 | July 18, 2025 | 65 | Yes | 11.46: no end date published |
| 54 | FortiClient EMS | 7.0 | October 27, 2025 | 65 | Yes | 8.0: January 2, 2031 |
| 55 | Fortra GoAnywhere MFT | 7.6 | ended (no date published) | 65 | Yes | 7.10: no end date published |
| 56 | GitLab | 19.2 | October 15, 2026 | 65 | Yes | 19.5: January 21, 2027 |
| 57 | Ivanti Connect Secure | 22.6 | December 31, 2024 | 65 | Yes | 25.1.3: April 30, 2027 |
| 58 | Ivanti Policy Secure | 22.6 | December 31, 2024 | 65 | Yes | 25.1.2: April 30, 2027 |
| 59 | Jenkins | 2.568 | September 30, 2026 | 65 | Yes | 2.580: no end date published |
| 60 | jQuery | 2 | ended (no date published) | 65 | Yes | 4: no end date published |
| 61 | Kentico | 12 | ended (no date published) | 65 | Yes | 13: December 31, 2026 |
| 62 | Microsoft Exchange | 2019 | October 14, 2025 | 65 | Yes | subscription: no end date published |
| 63 | Palo Alto Expedition | 1 | December 31, 2024 | 65 | Yes | — |
| 64 | PAN-OS | 11.0 | November 17, 2024 | 65 | Yes | 12.2: July 30, 2029 |
| 65 | Progress LoadMaster | LM-8020-FIPS | ended (no date published) | 65 | Yes | 7.2.63: no end date published |
| 66 | Progress MOVEit Transfer | 2024.1 | ended (no date published) | 65 | Yes | 2026.0: November 17, 2027 |
| 67 | Quest KACE SMA | 14.1 | ended (no date published) | 65 | Yes | 15.1: no end date published |
| 68 | Red Hat JBoss EAP | 7 | June 30, 2025 | 65 | Yes | 8: February 5, 2031 |
| 69 | Ruby on Rails | 8.0 | November 7, 2026 | 65 | Yes | 8.1: October 10, 2027 |
| 70 | Skype for Business Server | 2019 | October 14, 2025 | 65 | Yes | subscription: no end date published |
| 71 | SonicWall SMA 100 | 500v | November 1, 2025 | 65 | Yes | — |
| 72 | SonicWall SMA 1000 | 7200 | August 1, 2025 | 65 | Yes | 7210: no end date published |
| 73 | VMware Aria Operations | 8.17 | October 31, 2025 | 65 | Yes | 8.18: October 11, 2027 |
| 74 | VMware Cloud Foundation | 4.5 | October 2, 2025 | 65 | Yes | 9.1: August 12, 2028 |
| 75 | VMware ESXi | 7.0 | October 2, 2025 | 65 | Yes | 9.1: August 12, 2028 |
| 76 | VMware vCenter | 7.0 | October 2, 2025 | 65 | Yes | 9.1: August 12, 2028 |
| 77 | Zimbra | 10.0 | June 30, 2025 | 65 | Yes | 10.1: no end date published |
| 78 | Zyxel ATP/USG FLEX/USG/ZyWALL/VPN | USG2200 | September 30, 2026 | 65 | Yes | ATP100: June 30, 2030 |
| 79 | Adobe Acrobat | 2020 | November 30, 2025 | 60 | Yes | continuous: no end date published |
| 80 | Adobe ColdFusion | 2021 | November 10, 2025 | 60 | Yes | 2025: February 26, 2030 |
| 81 | Amazon Linux | 2 | June 30, 2026 | 60 | No | 2023: June 30, 2029 |
| 82 | Apache Shiro | 2 | June 29, 2026 | 60 | Yes | 3: no end date published |
| 83 | Atlassian Data Center | End of Sale — New Customers | March 30, 2026 | 60 | Yes | Data Center Support (Jira, Confluence): March 28, 2029 |
| 84 | BIG-IP | 21.0 | August 6, 2026 | 60 | Yes | 21.1: May 5, 2029 |
| 85 | Check Point Gaia | R81.10 | March 2026 | 60 | Yes | R82.20: September 2030 |
| 86 | Cisco IOS XE | 17.17 | July 30, 2026 | 60 | Yes | 26.1: no end date published |
| 87 | CrushFTP | 10 | March 1, 2026 | 60 | Yes | 11: no end date published |
| 88 | FortiADC | 7.0 | August 1, 2026 | 60 | Yes | 8.0: November 20, 2029 |
| 89 | FortiMail | 7.0 | November 17, 2025 | 60 | Yes | 8.0: November 6, 2030 |
| 90 | FortiProxy | 7.0 | February 24, 2026 | 60 | Yes | 7.6: March 30, 2029 |
| 91 | FortiSandbox | 4.2 | November 14, 2025 | 60 | Yes | 5.2: December 10, 2030 |
| 92 | FortiWeb | 7.0 | July 19, 2026 | 60 | Yes | 8.0: January 28, 2030 |
| 93 | MariaDB | 12.2 | May 28, 2026 | 60 | No | 13.0: no end date published |
| 94 | Microsoft SQL Server | 13.0-sp3-acp | July 14, 2026 | 60 | Yes | 17.0: January 6, 2036 |
| 95 | PaperCut NG/MF | 22 | December 31, 2025 | 60 | Yes | 26: no end date published |
| 96 | PostgreSQL | 13 | November 13, 2025 | 60 | No | 18: November 14, 2030 |
| 97 | Progress WhatsUp Gold | 24.0 | April 2, 2026 | 60 | Yes | 26.0: no end date published |
| 98 | Progress WS_FTP Server | 8.8 | July 4, 2026 | 60 | Yes | 10.0: June 9, 2028 |
| 99 | QNAP NAS | TS-1232XU | December 31, 2025 | 60 | Yes | ES1686Adc: no end date published |
| 100 | SharePoint | 2019 | July 14, 2026 | 60 | Yes | subscription: no end date published |
| 101 | Sitecore | 9.3 | December 31, 2025 | 60 | Yes | 10.5: December 31, 2032 |
| 102 | SLES | 15.6 | December 31, 2025 | 60 | No | 16.0: November 30, 2027 |
| 103 | SolarWinds Orion Platform | 2023.2 | July 10, 2026 | 60 | Yes | 2026.4: no end date published |
| 104 | SonicWall Email Security | 10.0.34 | June 1, 2026 | 60 | Yes | 10.0.36: April 30, 2027 |
| 105 | Sophos UTM | 9 | June 30, 2026 | 60 | Yes | — |
| 106 | Splunk | 9.3 | July 24, 2026 | 60 | Yes | 10.6: September 30, 2028 |
| 107 | Spring Boot | 3.5 | June 2026 | 60 | Yes | 4.1: July 2027 |
| 108 | Spring Cloud | 2025.0 | June 2026 | 60 | Yes | 2025.1: July 2027 |
| 109 | VMware Tools | 11.3 | June 17, 2026 | 60 | Yes | 13.1: August 12, 2028 |
| 110 | Vue.js | 3.4 | September 3, 2024 | 60 | No | 3.5: no end date published |
| 111 | WatchGuard Firebox | Firebox T70 | December 31, 2025 | 60 | Yes | Firebox T85-PoE: July 1, 2031 |
| 112 | Zabbix | 7.2 | December 31, 2025 | 60 | Yes | 8.0: November 30, 2031 |
| 113 | Apache ActiveMQ | 6.2 | September 5, 2026 | 55 | Yes | 6.4: no end date published |
| 114 | Arista EOS | 4.31 | October 13, 2026 | 55 | Yes | 4.36: April 8, 2029 |
| 115 | Artifactory | 7.111 | October 23, 2026 | 55 | Yes | 7.173: January 27, 2028 |
| 116 | Bamboo | 10.0 | August 21, 2026 | 55 | Yes | 12.1: December 17, 2027 |
| 117 | Bitbucket | 9.3 | October 29, 2026 | 55 | Yes | 10.5: no end date published |
| 118 | Cisco Small Business RV Series Routers (hardware) | RV345 | October 31, 2026 | 55 | Yes | — |
| 119 | Confluence | 9.1 | October 3, 2026 | 55 | Yes | 11.0: October 8, 2028 |
| 120 | FortiAnalyzer | 7.2 | October 11, 2026 | 55 | Yes | 8.0: October 21, 2030 |
| 121 | FortiManager | 7.2 | October 11, 2026 | 55 | Yes | 8.0: October 21, 2030 |
| 122 | FortiOS | 7.2 | September 30, 2026 | 55 | Yes | 8.0: October 21, 2030 |
| 123 | Horizon | 8.2309 | October 26, 2026 | 55 | Yes | 8.2609: October 22, 2029 |
| 124 | JetBrains TeamCity | 2025.11 | September 2, 2026 | 55 | Yes | 2026.2: no end date published |
| 125 | Jira Service Management | 10.1 | October 9, 2026 | 55 | Yes | 11.3: December 3, 2027 |
| 126 | Jira Software | 10.1 | October 9, 2026 | 55 | Yes | 11.3: December 3, 2027 |
| 127 | Kubernetes | 1.34 | October 27, 2026 | 55 | No | 1.37: October 28, 2027 |
| 128 | Magento | 2.4.6 | August 11, 2026 | 55 | Yes | 2.4.9: May 31, 2029 |
| 129 | ManageEngine Endpoint Central | 11.2 | September 30, 2026 | 55 | Yes | 11.3: no end date published |
| 130 | Microsoft 365 Apps | 2606 | October 13, 2026 | 55 | Yes | 2610: no end date published |
| 131 | Microsoft Configuration Manager | 2503 | September 30, 2026 | 55 | Yes | 2609: March 28, 2028 |
| 132 | Microsoft Office | 2021 | October 13, 2026 | 55 | Yes | 2024: October 9, 2029 |
| 133 | Microsoft Project | 2021 | October 13, 2026 | 55 | Yes | 2024: October 9, 2029 |
| 134 | MySQL | 26.7 | October 20, 2026 | 55 | No | 26.10: no end date published |
| 135 | Next.js | 14 | October 26, 2025 | 55 | No | 16: no end date published |
| 136 | Nexus | 3.80 | November 6, 2026 | 55 | Yes | 3.98: May 3, 2028 |
| 137 | Oracle JDK | 26 | September 18, 2026 | 55 | Yes | 27: March 2027 |
| 138 | Python | 3.10 | October 1, 2026 | 55 | No | 3.15: October 2031 |
| 139 | RouterOS | 7.24 | October 23, 2026 | 55 | Yes | 7.25: no end date published |
| 140 | SolarWinds Serv-U | 15.5.0 | October 8, 2026 | 55 | Yes | 2026.3: no end date published |
| 141 | SonicWall SonicOS | 7.3.1 | September 30, 2026 | 55 | Yes | 7.3.3: no end date published |
| 142 | Sophos Firewall | 22.0 GA | October 30, 2026 | 55 | Yes | 22.0 MR3: no end date published |
| 143 | Visual Studio | 18.10 | October 13, 2026 | 55 | Yes | 18.11: no end date published |
| 144 | Angular | 19 | May 19, 2026 | 50 | No | 22: June 2028 |
| 145 | AngularJS | 1.8 | December 31, 2021 | 50 | No | — |
| 146 | Ansible | 13 | June 18, 2026 | 50 | No | 14: no end date published |
| 147 | Apache Cassandra | 3.11 | September 5, 2024 | 50 | No | 5.0: no end date published |
| 148 | Apache Lucene | 8 | October 14, 2024 | 50 | No | 10: no end date published |
| 149 | Barracuda Web Application Firewall | 860 Rev A | January 30, 2023 | 50 | No | 660 Rev A: no end date published |
| 150 | BizTalk Server | 2013-r2 | July 11, 2023 | 50 | No | 2020: April 9, 2030 |
| 151 | Bootstrap | 4 | January 1, 2023 | 50 | No | 5: no end date published |
| 152 | CDH (Cloudera Distribution of Hadoop) | 6.3 | March 31, 2022 | 50 | No | — |
| 153 | Check Point security gateway appliances (hardware) | 2200 | June 1, 2022 | 50 | No | — |
| 154 | Cisco UCS servers and fabric interconnects (hardware) | UCS 6248UP Fabric Interconnect | May 31, 2024 | 50 | No | UCS 6454 Fabric Interconnect: December 31, 2031 |
| 155 | Cloudera Base on Premises | 7.1.8 | August 31, 2024 | 50 | No | 7.1.9: October 31, 2028 |
| 156 | CloudLinux OS | 7 | June 30, 2024 | 50 | No | 10: May 31, 2035 |
| 157 | Django | 5.1 | December 3, 2025 | 50 | No | 6.1: December 31, 2027 |
| 158 | Dynamics 365 Customer Engagement (on-premises) | 9.0 | July 11, 2023 | 50 | No | 9.1: January 9, 2031 |
| 159 | Dynamics AX | 2012-r3 | January 10, 2023 | 50 | No | — |
| 160 | Express | 3 | July 2015 | 50 | No | 5: no end date published |
| 161 | Google Guava | 32 | December 18, 2023 | 50 | No | 33: no end date published |
| 162 | H2 Database | 1.4 | November 29, 2021 | 50 | No | 2: no end date published |
| 163 | Hortonworks Data Platform (HDP) | 3.1 | December 31, 2021 | 50 | No | — |
| 164 | IBM Db2 | 11.1 | April 30, 2022 | 50 | No | 12.1: no end date published |
| 165 | IBM Netezza | N3001 | April 30, 2023 | 50 | No | Software 11.3: no end date published |
| 166 | Ionic | 7 | October 17, 2024 | 50 | No | 9: no end date published |
| 167 | jQuery UI | 1.13 | August 5, 2024 | 50 | No | 1.14: no end date published |
| 168 | Juniper EX Series (hardware) | EX2200 | June 30, 2024 | 50 | No | EX3400: no end date published |
| 169 | Knockout.js | 3.4 | February 21, 2019 | 50 | No | 3.5: no end date published |
| 170 | Lodash | 3 | January 12, 2016 | 50 | No | 4: no end date published |
| 171 | LoopBack | 3 | December 31, 2020 | 50 | No | — |
| 172 | MariaDB Connector/J | 3.2 | November 2023 | 50 | No | 4.0: no end date published |
| 173 | Microsoft Host Integration Server | 2013 | January 9, 2024 | 50 | No | 2020: July 9, 2030 |
| 174 | Microsoft Hyper-V Server | 2012-r2 | October 10, 2023 | 50 | No | 2019: January 9, 2029 |
| 175 | Microsoft Identity Manager | 2010-r2 | October 11, 2022 | 50 | No | 2016: January 9, 2029 |
| 176 | NestJS | 9 | June 12, 2023 | 50 | No | 12: no end date published |
| 177 | NetScaler MPX / SDX (hardware) | MPX/SDX 14000 | October 1, 2024 | 50 | No | MPX/SDX 16000: no end date published |
| 178 | NGINX | 1.29 | May 13, 2026 | 50 | No | 1.31: no end date published |
| 179 | OpenLDAP | 2.4 | October 25, 2021 | 50 | No | 2.7: no end date published |
| 180 | Oracle Database | 18 | June 30, 2021 | 50 | No | 23: December 31, 2031 |
| 181 | Oracle SOA Suite | 12.1 | December 31, 2017 | 50 | No | 14.1: December 31, 2030 |
| 182 | PowerShell | 7.3 | May 8, 2024 | 50 | No | 7.6: November 14, 2028 |
| 183 | Protractor | 7.0 | August 2023 | 50 | No | — |
| 184 | Red Hat build of OpenJDK | 11 | October 31, 2024 | 50 | No | 25: December 31, 2030 |
| 185 | Red Hat Fuse | 7 | June 30, 2024 | 50 | No | — |
| 186 | Red Hat Virtualization | 4.4 | August 31, 2024 | 50 | No | — |
| 187 | SnakeYAML | 1 | February 26, 2023 | 50 | No | 2: no end date published |
| 188 | SonicWall Email Security appliances | ES 3300 | April 1, 2020 | 50 | No | ES 5000: May 1, 2027 |
| 189 | SonicWall SonicWave / SonicPoint access points (hardware) | N2 | July 31, 2022 | 50 | No | 224w: July 2, 2027 |
| 190 | Veeam ONE | 11 | February 29, 2024 | 50 | No | 13: November 30, 2028 |
| 191 | webpack | 4 | October 10, 2020 | 50 | No | 5: no end date published |
| 192 | Windows Embedded | 8.1-industry | July 11, 2023 | 50 | No | — |
| 193 | YUI | 3 | August 29, 2014 | 50 | No | — |
| 194 | Apache CXF | 4.0 | ended (no date published) | 45 | No | 4.2: no end date published |
| 195 | Apache Derby | 10.17 | October 10, 2025 | 45 | No | — |
| 196 | Apache HttpComponents | Client 5.1 | ended (no date published) | 45 | No | Client 5.6: no end date published |
| 197 | Apache Tapestry | 5.8 | February 2, 2025 | 45 | No | 5.9: no end date published |
| 198 | Axios | 1.20 | ended (no date published) | 45 | No | 1.21: no end date published |
| 199 | Azure DevOps Server | 2015 | October 14, 2025 | 45 | No | continuous: no end date published |
| 200 | Barracuda CloudGen Firewall | SC22, SC23 (3G/UMTS) Rev. A | February 28, 2025 | 45 | No | SC20, SC21 Rev. A: no end date published |
| 201 | Cisco Firepower appliances (hardware) | Firepower 4120 | August 31, 2025 | 45 | No | Firepower 9300: March 31, 2031 |
| 202 | Control-M | 9.0.20 | July 23, 2025 | 45 | No | 9.0.22: May 19, 2030 |
| 203 | Dynamics SL | 2015 | January 14, 2025 | 45 | No | 2018: July 11, 2028 |
| 204 | Eclipse Jetty | 11 | January 1, 2025 | 45 | No | 12.1: no end date published |
| 205 | Fortinet FortiExtender (hardware) | FortiExtender-40D-AMEU | January 13, 2025 | 45 | No | FortiExtender-511F: May 25, 2031 |
| 206 | HAProxy | 3.1 | ended (no date published) | 45 | No | 3.4: no end date published |
| 207 | Hibernate ORM | 7.3 | ended (no date published) | 45 | No | 7.4: no end date published |
| 208 | HtmlUnit | 4 | ended (no date published) | 45 | No | 5: no end date published |
| 209 | IBM MQ | 9.2 | September 30, 2025 | 45 | No | 10.0: no end date published |
| 210 | Ivanti Secure Appliance (ISA / PSA) | PSA7000f | December 31, 2024 | 45 | No | ISA8000: January 31, 2027 |
| 211 | Juniper QFX Series (hardware) | QFX5100-24Q-AA | August 31, 2025 | 45 | No | QFX5120: no end date published |
| 212 | Juniper SRX Series (hardware) | SRX550 | November 30, 2024 | 45 | No | SRX4600: no end date published |
| 213 | Logback | 1.4 | ended (no date published) | 45 | No | 1.6: no end date published |
| 214 | Neo4j | 2026.09 | October 20, 2026 | 45 | No | 2026.10: no end date published |
| 215 | NetBackup Appliance OS | 5.1 | September 8, 2025 | 45 | No | 6.1: no end date published |
| 216 | OpenVPN | 2.5 | July 2025 | 45 | No | 2.7: no end date published |
| 217 | Oracle GraalVM | 24 | September 30, 2025 | 45 | No | 25: no end date published |
| 218 | Oracle Linux | 7 | December 31, 2024 | 45 | No | 10: June 30, 2035 |
| 219 | PostCSS | 7.0 | ended (no date published) | 45 | No | 8.5: no end date published |
| 220 | Protocol Buffers | 3.0-3.24 | ended (no date published) | 45 | No | 4.x: March 31, 2028 |
| 221 | Red Hat JBoss Web Server | 5 | July 31, 2025 | 45 | No | 7: November 30, 2031 |
| 222 | Red Hat Single Sign-On | 7.6 | June 30, 2025 | 45 | No | — |
| 223 | SAP BusinessObjects BI | 4.2 | December 31, 2024 | 45 | No | 2025: December 31, 2028 |
| 224 | SapMachine | 26 | ended (no date published) | 45 | No | 27: March 2027 |
| 225 | Synology DSM | 7.1 | ended (no date published) | 45 | No | 7.4: no end date published |
| 226 | Terraform | 1.15 | October 21, 2026 | 45 | No | 1.17: no end date published |
| 227 | Thymeleaf | 3.0 | ended (no date published) | 45 | No | 3.1: no end date published |
| 228 | Ubiquiti UniFi | UAP-AC | ended (no date published) | 45 | No | — |
| 229 | Veeam Backup for Microsoft 365 | 7 | June 30, 2025 | 45 | No | 8: May 31, 2027 |
| 230 | VMware Aria Automation | 8.17 | May 9, 2025 | 45 | No | 8.18: October 11, 2027 |
| 231 | VMware NSX | 3.2 | October 2, 2025 | 45 | No | 4.2: October 11, 2027 |
| 232 | VMware SRM | 8.8 | October 11, 2025 | 45 | No | 9.1: August 12, 2028 |
| 233 | Vuetify | 2 | January 23, 2025 | 45 | No | 4: no end date published |
| 234 | XCP-ng | 8.2 | September 16, 2025 | 45 | No | 8.3: November 30, 2028 |
| 235 | XenServer (Citrix Hypervisor) | 8.2 | June 25, 2025 | 45 | No | 9: July 31, 2031 |
| 236 | Acronis Cyber Protect | 15 | February 21, 2026 | 40 | No | 17: no end date published |
| 237 | Amazon EKS | 1.33 | July 29, 2026 | 40 | No | 1.37: December 1, 2027 |
| 238 | Cloudera Data Services on Premises | 1.5.5 | June 30, 2026 | 40 | No | 1.5.5 SP2: June 30, 2029 |
| 239 | CockroachDB | 26.1 | August 2, 2026 | 40 | No | 26.4: April 26, 2028 |
| 240 | Confluent Platform | 7.7 | July 26, 2026 | 40 | No | 8.3: June 17, 2028 |
| 241 | Couchbase Server | 7.2 | July 31, 2026 | 40 | No | 8.0: October 31, 2028 |
| 242 | Dynamics CRM | 2016 | January 13, 2026 | 40 | No | — |
| 243 | Dynamics GP | 2016-r2 | July 14, 2026 | 40 | No | 18: April 30, 2031 |
| 244 | Dynamics NAV | 2016 | April 14, 2026 | 40 | No | 2018: January 11, 2028 |
| 245 | ESLint | 9 | August 6, 2026 | 40 | No | 10: no end date published |
| 246 | F5 BIG-IP, VIPRION and VELOS (hardware) | VIPRION 2400 Chassis (F100) | April 1, 2026 | 40 | No | BX110 Blade (A118): no end date published |
| 247 | FileMaker | 2024 | June 30, 2026 | 40 | No | 2026: June 30, 2028 |
| 248 | FortiAuthenticator | 6.5 | June 30, 2026 | 40 | No | 8.0: April 2, 2030 |
| 249 | FortiNAC | 9.2 | March 29, 2026 | 40 | No | 9.4: November 13, 2026 |
| 250 | Fortinet FortiAP access points (hardware) | FAP-224E | June 14, 2026 | 40 | No | FortiAP-432FR: October 29, 2031 |
| 251 | GraphQL Java | 25 | April 23, 2026 | 40 | No | 26: no end date published |
| 252 | Hazelcast Platform | 5.5 | July 30, 2026 | 40 | No | 5.7: May 13, 2028 |
| 253 | HPE Aruba Networking gateways and controllers (hardware) | JZ686A | December 31, 2025 | 40 | No | JZ878A: December 31, 2032 |
| 254 | IBM AIX | 7.3.1 | December 31, 2025 | 40 | No | 7.3.4: December 31, 2028 |
| 255 | Ingress NGINX | 1 | March 31, 2026 | 40 | No | — |
| 256 | Jackson | 3.0 | February 23, 2026 | 40 | No | 3.2: no end date published |
| 257 | JsonPath (Jayway) | 2.10 | February 22, 2026 | 40 | No | 3.0: no end date published |
| 258 | Juniper MX and M Series (hardware) | MX5 | June 30, 2026 | 40 | No | MX240: no end date published |
| 259 | Micrometer | 1.15 | June 2026 | 40 | No | 1.17: July 2027 |
| 260 | Microsoft Advanced Threat Analytics | 1 | January 13, 2026 | 40 | No | — |
| 261 | Microsoft JDBC Driver for SQL Server | 9.4 | July 30, 2026 | 40 | No | 13.6: no end date published |
| 262 | Microsoft Project Server | 2019 | July 14, 2026 | 40 | No | subscription: no end date published |
| 263 | MySQL Connector/J | 9 | July 24, 2026 | 40 | No | 26: no end date published |
| 264 | NetApp ONTAP | 9.9.1 | June 30, 2026 | 40 | No | 9.19.1: July 31, 2031 |
| 265 | Nutanix Files | 5.1 | July 31, 2026 | 40 | No | 5.4: no end date published |
| 266 | Nuxt | 3 | July 31, 2026 | 40 | No | 4: no end date published |
| 267 | OPNsense | 26.1 | July 15, 2026 | 40 | No | 26.7: no end date published |
| 268 | Oracle APEX | 23.2 | May 31, 2026 | 40 | No | 26.1: November 2027 |
| 269 | Palo Alto GlobalProtect | 6.1 | December 31, 2025 | 40 | No | 6.3: June 30, 2028 |
| 270 | Palo Alto Networks PA-Series (hardware) | K2-Series | February 28, 2026 | 40 | No | PA-5450 Series: November 21, 2031 |
| 271 | RabbitMQ | 4.2 | July 31, 2026 | 40 | No | 4.4: July 31, 2027 |
| 272 | Reactor Netty | 1.2 | June 30, 2026 | 40 | No | 1.3: July 31, 2027 |
| 273 | Red Hat Ansible Automation Platform | 2.4 | June 30, 2026 | 40 | No | 2.7: June 2, 2029 |
| 274 | Red Hat build of Keycloak | 26.2 | June 3, 2026 | 40 | No | 26.6: May 15, 2027 |
| 275 | Red Hat Ceph Storage | 6 | March 20, 2026 | 40 | No | 9: January 28, 2029 |
| 276 | Red Hat Satellite | 6.16 | May 31, 2026 | 40 | No | 6.19: no end date published |
| 277 | Sophos Firewall appliances | SG 105 | June 30, 2026 | 40 | No | XGS 88: no end date published |
| 278 | Spring Security | 6.5 | June 2026 | 40 | No | 7.1: July 2027 |
| 279 | Streams for Apache Kafka (Red Hat AMQ Streams) | 3.0 | December 16, 2025 | 40 | No | — |
| 280 | Symfony | 8.0 | July 2026 | 40 | No | 8.1: January 2027 |
| 281 | TinyMCE | 7 | November 11, 2025 | 40 | No | 8: no end date published |
| 282 | Visual COBOL | 8.0 | July 31, 2026 | 40 | No | 10.0: July 31, 2028 |
| 283 | Zerto | 10.0_u5 | August 6, 2026 | 40 | No | 10.9: May 13, 2028 |
| 284 | Amazon Corretto | 26 | October 31, 2026 | 35 | No | 27: April 30, 2027 |
| 285 | Apache ActiveMQ Artemis | 2.56 | September 9, 2026 | 35 | No | 2.57: no end date published |
| 286 | Apache Kafka | 4.1 | October 26, 2026 | 35 | No | 4.4: no end date published |
| 287 | Azul Zulu | 26 | September 30, 2026 | 35 | No | 27: March 2027 |
| 288 | BellSoft Liberica | 26 | September 16, 2026 | 35 | No | 27: no end date published |
| 289 | Cisco ASA 5500-X Series (hardware) | ASA 5516-X | August 31, 2026 | 35 | No | — |
| 290 | Cisco Catalyst switches (hardware) | Catalyst 3650 | October 31, 2026 | 35 | No | Catalyst 9500-12Q: April 30, 2029 |
| 291 | Cisco Meraki | MX84 | October 31, 2026 | 35 | No | MX67C: November 30, 2031 |
| 292 | Citrix Virtual Apps and Desktops | 2503 | October 29, 2026 | 35 | No | 2607: August 17, 2029 |
| 293 | Cloudera Data Flow for Cloud | 3.0 | September 30, 2026 | 35 | No | 3.2: March 31, 2027 |
| 294 | Cloudera on Cloud | 7.2.18 | September 30, 2026 | 35 | No | — |
| 295 | CloudNativePG | 1.29 | September 29, 2026 | 35 | No | 1.30: no end date published |
| 296 | Consul | 1.22 | October 31, 2026 | 35 | No | 2.1: no end date published |
| 297 | Cortex XDR | 9.0 | August 23, 2026 | 35 | No | 8.7-ce: July 2, 2027 |
| 298 | Dell storage and HCI (hardware) | VMAX 250F | September 30, 2026 | 35 | No | Data Domain All-Flash Ready Node: no end date published |
| 299 | Dynamics 365 Business Central on-premises | 26 | October 13, 2026 | 35 | No | 29: April 6, 2028 |
| 300 | Eclipse Temurin | 26 | September 22, 2026 | 35 | No | 27: March 2027 |
| 301 | Ember.js | 7.2 | October 5, 2026 | 35 | No | 7.3: no end date published |
| 302 | Fortinet FortiGate appliances (hardware) | FortiWiFi-30E | October 15, 2026 | 35 | No | FortiGate-60F: January 13, 2032 |
| 303 | Fortinet FortiSwitch switches (hardware) | FortiSwitch-3032D | August 17, 2026 | 35 | No | FortiSwitch-424E-Fiber: November 29, 2031 |
| 304 | Fortinet security appliances (hardware) | FortiAuthenticator-2000E | October 31, 2026 | 35 | No | FortiProxy-400G: December 31, 2031 |
| 305 | Grails | 7 | September 2026 | 35 | No | 8.0: no end date published |
| 306 | HashiCorp Vault | 2.1 | October 14, 2026 | 35 | No | 2.2: no end date published |
| 307 | HPE Aruba Networking access points (hardware) | JW327ACM | October 31, 2026 | 35 | No | JY678A: January 31, 2030 |
| 308 | HPE Aruba Networking switches (hardware) | J9777A | October 31, 2026 | 35 | No | JL724A: December 31, 2033 |
| 309 | IBM i | 7.4 | September 30, 2026 | 35 | No | 7.6: no end date published |
| 310 | IBM Semeru Runtime | 26 | September 30, 2026 | 35 | No | 27: March 31, 2027 |
| 311 | IBM z/OS | 2.5 | September 30, 2026 | 35 | No | 3.2: no end date published |
| 312 | JSON-java (org.json) | 20260719 | August 14, 2026 | 35 | No | 20260814: no end date published |
| 313 | Keycloak | 26.7 | October 1, 2026 | 35 | No | 26.8: no end date published |
| 314 | Liferay DXP | 2025.q3 | September 2, 2026 | 35 | No | 2026.q3: August 18, 2027 |
| 315 | Mattermost | 11.9 | October 15, 2026 | 35 | No | 12.0: January 15, 2027 |
| 316 | Microsoft Entra Connect | 2.5.79.0 | October 23, 2026 | 35 | No | 2.6.92.0: no end date published |
| 317 | Microsoft Visio | 2021 | October 13, 2026 | 35 | No | 2024: October 9, 2029 |
| 318 | Moodle | 5.0 | October 5, 2026 | 35 | No | 5.3: October 1, 2029 |
| 319 | MuleSoft Runtime | 4.11 | October 4, 2026 | 35 | No | 4.13: June 6, 2027 |
| 320 | Nextcloud | 32 | September 30, 2026 | 35 | No | 35: September 15, 2027 |
| 321 | Nomad | 1.11 | October 31, 2026 | 35 | No | 2.1: no end date published |
| 322 | NumPy | 2.1 | August 19, 2026 | 35 | No | 2.5: no end date published |
| 323 | Nutanix AOS | 6.10 | October 31, 2026 | 35 | No | 7.6: July 31, 2028 |
| 324 | Nutanix Prism | pc.2024.2 | October 31, 2026 | 35 | No | pc.7.6: July 31, 2028 |
| 325 | Proxmox VE | 8 | August 31, 2026 | 35 | No | 9: no end date published |
| 326 | Quarkus | 3.39 | September 30, 2026 | 35 | No | 3.40: September 30, 2027 |
| 327 | Red Hat Data Grid | 8.5 | September 17, 2026 | 35 | No | 8.6: December 31, 2027 |
| 328 | Red Hat OpenShift | 4.18 | August 25, 2026 | 35 | No | 5.0: November 30, 2028 |
| 329 | Red Hat OpenStack Platform | 17.1 | September 22, 2026 | 35 | No | 18.0: August 26, 2028 |
| 330 | Rocket.Chat | 8.4 | October 31, 2026 | 35 | No | 8.9: October 31, 2027 |
| 331 | SonarQube Server | 2026.4 | September 29, 2026 | 35 | No | 2026.5: no end date published |
| 332 | SonicWall Firewalls (TZ / NSa / NSsp hardware) | NSA 4600 | October 1, 2026 | 35 | No | NSa 2700: no end date published |
| 333 | SonicWall Network Security Manager (NSM) On-Prem | 4.0.0 | October 30, 2026 | 35 | No | 4.2.0: June 23, 2027 |
How the index is built
The products are the commercial tier listed on /accuracy: software with a paid-support market. For each one the index takes the newest version whose end of life has passed on the build day and shows that version's EOL Risk Score, the same number as its score page. "CISA KEV entries" means the product has at least one vulnerability in CISA's Known Exploited Vulnerabilities catalog; it is a product-level factor of the score, not a claim that this exact version is affected. The last column shows the version to move to and when its own support ends.
The whole table is available as JSON, rebuilt with every site build. Use in your own IT estate is free; using it to rate or report on other organisations, or redistributing it, needs a data licence.