Cfengine 3.x — End of Life

Active
14 releases in this series0 CVEs

Cfengine 3.x is partially supported: only 3.28, 3.27, 3.24 still receive security fixes. The most recent release in this series is 3.28.0. No CVE is currently tracked for Cfengine 3.x.

Cfengine 3.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
3.28Jul 10, 2026—No3.28.0Active
3.27LTSJan 9, 2026—Jan 9, 20293.27.1Active
3.26May 20, 2025—Jan 9, 20263.26.0EOL
3.25Jan 6, 2025—May 20, 20253.25.0EOL
3.24LTSJul 22, 2024—Jul 31, 20273.24.4Active
3.23Dec 5, 2023—Jul 22, 20243.23.0EOL
3.22Jun 16, 2023—Dec 5, 20233.22.0EOL
3.21LTSDec 21, 2022—Dec 31, 20253.21.8EOL
3.20Jul 1, 2022—Dec 21, 20223.20.0EOL
3.19Dec 10, 2021—Jul 1, 20223.19.0EOL
3.18LTSJun 24, 2021—Aug 31, 20243.18.8EOL
3.17Nov 19, 2020—Jun 24, 20213.17.0EOL
3.16Jun 23, 2020—Nov 19, 20203.16.0EOL
3.15LTSDec 19, 2019—Dec 31, 20223.15.7EOL

CVEs affecting Cfengine 3.x (0)

No CVEs tracked for Cfengine 3.x.

Add a Cfengine 3 EOL badge to your README

Show your users which Cfengine version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Cfengine 3 EOL status
[![Cfengine 3 EOL status](https://eolcanary.com/badge/cfengine/3.svg)](https://eolcanary.com/explore/cfengine/3)

Frequently asked questions

Is Cfengine 3 end of life?

Partially. 11 of the 14 Cfengine 3.x releases have reached end of life. Still supported: 3.28, 3.27, 3.24.

What CVEs affect Cfengine 3?

No CVEs are currently tracked for Cfengine 3.x in the NVD data we monitor.

What is the latest Cfengine 3 version?

The latest Cfengine 3.x patch release is 3.28.0, released on July 10, 2026. Always run the latest patch to benefit from all security fixes.

When was Cfengine 3 first released?

Cfengine 3.15 was released on December 19, 2019. See the full version timeline in the table above.

Is it safe to run Cfengine 3 in production?

Only on a supported release (3.28, 3.27, 3.24). Make sure you run the latest patch (3.28.0) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA