Sonarqube Community End of Life (EOL) Dates & Support Timeline
Complete end-of-life dates, support windows, and security status for all Sonarqube Community versions. Data sourced from endoflife.date and official vendor documentation. Updated at every deploy.
✓Sonarqube Community 26.4.0.121862 is actively supported. No versions approaching EOL in the next 6 months.
Latest Active
26.4.0.121862
26 series
Next EOL
—
None upcoming
Active Versions
1
of 7 total
EOL Versions
6
no longer patched
Release Cycle Timeline
■ EOL
■ Warning
■ Active
┊ Today
All Versions
Version
Latest Release
Release Date
EOL Date
Days
Status
7
7.9.6
Feb 2, 2018
May 4, 2021
1831 days past EOL
EOL
8
8.9.10.61524
Oct 15, 2019
Feb 7, 2023
1187 days past EOL
EOL
9
9.9.8.100196
Jul 5, 2021
Jan 20, 2025
474 days past EOL
EOL
10
10.7.0.96327
Mar 30, 2023
Dec 2, 2024
523 days past EOL
EOL
24
24.12.0.100206
Dec 2, 2024
Jan 7, 2025
487 days past EOL
EOL
25
25.12.0.117093
Jan 7, 2025
Jan 6, 2026
123 days past EOL
EOL
26
26.4.0.121862
Jan 6, 2026
Already EOL
Supported
Active
What does Sonarqube Community end of life mean for your organization?
When a Sonarqube Community version reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.
The CVE blind spot: Most vulnerability scanners check for known CVEs but do not flag the accumulation of unpatched vulnerabilities in EOL software. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no patch will ever exist. This is the most dangerous gap in enterprise security posture.
Organizations running EOL Sonarqube Community should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.
Check your full stack for EOL risk
Upload requirements.txt, package.json, or Gemfile — full EOL report instantly.
What is the end-of-life date for Sonarqube Community?
See the full table above for all Sonarqube Community version EOL dates.
What is the latest supported version of Sonarqube Community?
The latest active version of Sonarqube Community is 26.4.0.121862. Always verify against the table above as support windows can change.
What happens when Sonarqube Community reaches end of life?
When Sonarqube Community reaches end of life, the vendor stops issuing security patches. Any CVEs disclosed after the EOL date accumulate indefinitely with no patch path — creating an ever-growing attack surface that most vulnerability scanners do not flag.
How do I check if I'm running an EOL version of Sonarqube Community?
Check your current version against the table above. If your version's EOL date has passed, you are running unsupported software. You can also use the endoflife.ai Stack Scanner to check your entire dependency file at once.
Is there extended support available for EOL Sonarqube Community versions?
Some vendors offer extended support for EOL software. Contact the original vendor or check with enterprise support providers for options.