SonarQube Server 2026.4 · Version Status

SonarQube Server 2026.4 End of Life Date

SonarQube Server 2026.4 end-of-life date, support status, and CVE risk. Data from endoflife.date and official vendor documentation.

✓ SonarQube Server 2026.4 is actively supported. EOL date: TBD.
EOL Date
TBD
Supported
Latest Release
2026.4
Standard release
Release Date
Jul 23, 2026
SonarQube Server 2026.4 series
Lifecycle detail

SonarQube Server 2026.4 was released on July 23, 2026 and has no published end-of-life date yet. It is not an LTS release; SonarQube Server reserves longer patch windows for its LTS versions. Its most recent patch is 2026.4, published July 23, 2026.

← SonarQube Server 2026.3 All SonarQube Server versions
10 / 100
Low Risk
EOL Risk Score™  How is this calculated? →
EOL Recency
0/40
Attack Surface
10/30 Medium tier
CISA KEV Exposure
0/20 Not in KEV
Extended Support
0/10 Available
EOL Risk Score™ — proprietary methodology by endoflife.ai. Factors: EOL recency, attack surface breadth, CISA KEV catalog presence, extended support availability. Updated at every build. Methodology →  ·  View score card →
All SonarQube Server Versions
VersionLatestEOL DateStatus
7 LTS 7.9.6 May 4, 2021 EOL
8 LTS 8.9.10 Feb 7, 2023 EOL
9 LTS 9.9.8 Jan 20, 2025 EOL
10 10.8.0 Mar 26, 2025 EOL
2025.1 LTS 2025.1.8 Jul 1, 2026 EOL
2025.2 2025.2.0 May 26, 2025 EOL
2025.3 2025.3.1 Jul 29, 2025 EOL
2025.4 LTS 2025.4.8 Jan 30, 2027 Warning

What does SonarQube Server 2026.4 end of life mean?

When SonarQube Server 2026.4 reaches end of life, the maintainers stop issuing security patches for this version. CVEs discovered after the EOL date are publicly disclosed on the National Vulnerability Database with no patch available. Exploit code frequently appears on GitHub within days of disclosure.

The CVE blind spot: Most vulnerability scanners check for known CVEs but do not flag the ongoing accumulation of unpatched vulnerabilities in EOL software versions. Running SonarQube Server 2026.4 past its EOL date creates a permanently growing attack surface that standard security tooling will not surface.

Migrate to SonarQube Server 2026.4 or implement compensating controls — network segmentation, enhanced monitoring, restricted access — while migration is underway.

Frequently Asked Questions
When does SonarQube Server 2026.4 reach end of life?
SonarQube Server 2026.4 has no announced end-of-life date yet — it is currently supported, with EOL to be determined.
Is SonarQube Server 2026.4 still supported?
Yes, SonarQube Server 2026.4 is currently supported. The EOL date is TBD.
What should I upgrade to from SonarQube Server 2026.4?
The recommended upgrade from SonarQube Server 2026.4 is SonarQube Server 2026.4 — the latest actively supported version. Check the SonarQube Server full timeline for all supported versions.
What are the security risks of running SonarQube Server 2026.4 past EOL?
When SonarQube Server 2026.4 reaches end of life, the maintainers stop issuing security patches. Any CVEs disclosed after the EOL date accumulate with no remediation path. Most vulnerability scanners do not flag this — it is the CVE blind spot. Organizations running EOL SonarQube Server should migrate immediately or implement compensating controls.
Data from endoflife.date API · Generated at build time · How we source data →