Synced 17 Jun 2026 12:26 UTC Account

Is Apache Log4j 2.26.0 patched?

Apache · cycle 2.26 · Official site ↗
2.26.0100/100Healthy
Health score100/100
Open issues0
Exploited now0
Cycle 2.26 EOL
Latest release2.26.0

Summary iPlain-English security status for Apache Log4j 2.26.0, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Apache Log4j 2.26.0 is part of the 2.26 release line. No known vulnerabilities affect it in our data. The latest supported Apache Log4j release is 2.26.0.

Known issues affecting 2.26.0

None found for this version. ✓

Other Apache Log4j versions

Check another release line of Apache Log4j.

Frequently asked

Is Apache Log4j 2.26.0 patched?

Apache Log4j 2.26.0 is on the latest patch of its cycle with no known affecting vulnerabilities.

What is the latest version of Apache Log4j?

The latest supported Apache Log4j release is 2.26.0.

Is Apache Log4j 2.26.0 still receiving security updates?

Yes — the 2.26 line is still supported and receiving security updates.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade — Apache Log4j official site ↗