Apache TomcatEnd of Life (EOL) Dates & Support Status

Active

Server SoftwareLatest Version: 9.0.122Latest Release: Sep 10, 2026

Apache Tomcat is an open-source Java Servlet container and web server for Java web applications.

CISA known-exploited vulnerability signal

CISA KEV catalog version 2026.09.25 includes 6 manually mapped record(s) for this product.

Newest matching record added: Aug 4, 2026

This is a product-level catalog match, not a finding that the version shown above is vulnerable. Review each vendor advisory and affected-version range before acting.

Matching CVEs (showing up to 6)

CVE-2026-34486
CVE-2025-24813
CVE-2016-8735
CVE-2017-12615
CVE-2017-12617
CVE-2020-1938

Support summary

Apache Tomcat currently has supported cycles. Track the next EOL date and validate upgrades before your change window.

What do EOL and support statuses mean?

Next EOL

Mar 31, 2027

Apache Tomcat 9.0 · 185 days left

Supported cycles

0 lts

Versions

Latest Version

9.0.122

Active Support

EOL

Lifecycle Timeline

Sep 6, 2003As of Sep 27, 2026

11.0Active · Date not announced

10.1Active · Date not announced

10.0EOL · Oct 31, 2022

9.0Active · Mar 31, 2027

8.5EOL · Mar 31, 2024

8.0EOL · Jun 30, 2018

7EOL · Mar 31, 2021

6EOL · Dec 31, 2016

5EOL · Sep 30, 2012

ActiveSecurityEOLHistorical phase unknown

Bars show history up to the snapshot date. Gray intervals lack dated support boundaries; arrows indicate an unannounced EOL date, not a support guarantee.

Versions

Release	Release Date	Active Support	EOL	Latest Version	LTS	Status
11.0	Oct 3, 2024	Maintained	Date not announced	11.0.26	No	Active
10.1	Sep 23, 2022	Maintained	Date not announced	10.1.60	No	Active
10.0	Dec 3, 2020	Ended	Oct 31, 2022	10.0.27	No	EOL
9.0	Sep 27, 2017	Maintained	Mar 31, 2027	9.0.122	No	Active
8.5	Mar 17, 2016	Ended	Mar 31, 2024	8.5.100	No	EOL
8.0	Jan 29, 2014	Ended	Jun 30, 2018	8.0.53	No	EOL
7	Jun 13, 2010	Ended	Mar 31, 2021	7.0.109	No	EOL
6	Oct 21, 2006	Ended	Dec 31, 2016	6.0.53	No	EOL
5	Sep 6, 2003	Ended	Sep 30, 2012	5.5.36	No	EOL

Data sources

Sources

endoflife.date Official release policy

Embed this badge

Show Apache Tomcat's live support status in your README, docs, or dashboard. The badge is a static SVG served from eol.wiki and follows the lifecycle data above.

Markdown

[![Apache Tomcat end-of-life status](https://eol.wiki/badge/tomcat.svg)](https://eol.wiki/tomcat/)

HTML

<a href="https://eol.wiki/tomcat/"><img src="https://eol.wiki/badge/tomcat.svg" alt="Apache Tomcat end-of-life status" height="20"></a>

All badges & lifecycle API →

Frequently Asked Questions

Which versions of Apache Tomcat have reached end of life?

The following Apache Tomcat versions have reached end of life and no longer receive security updates: 10.0, 8.5, 8.0, 7, 6, 5. It is recommended to upgrade to a supported version.

Is it safe to continue using Apache Tomcat 10.0?

Apache Tomcat 10.0 has reached end of life and no longer receives security patches or bug fixes. Continuing to use it may expose your systems to known vulnerabilities. We strongly recommend upgrading to a supported version.

What is the latest version of Apache Tomcat?

The latest version of Apache Tomcat is 9.0.122, released in the 9.0 release cycle.

How many versions of Apache Tomcat are currently supported?

Apache Tomcat currently has 3 actively supported version(s): 11.0, 10.1, 9.0.

When does Apache Tomcat 11.0 reach end of life?

Apache Tomcat 11.0 does not have a specific end-of-life date announced yet.

What should I do when Apache Tomcat reaches end of life?

When a Apache Tomcat version reaches end of life, you should: 1) Plan your migration to a supported version as soon as possible. 2) Review the release notes for breaking changes. 3) Test your applications thoroughly in a staging environment. 4) Update your dependencies to ensure compatibility with the new version.