AdminThis release focuses primarily on important security and platform updates, including updates to key dependencies such as SLF4J and Log4j.
We've also migrated to Install4j 11, which brings improved compatibility with modern macOS versions through an updated installer experience.
Grab the latest release here
Release notes for reference: https://www.soapui.org/docs/downloads/release-notes/
Path : C:\Program Files\SmartBear\SoapUI-5.10.0\lib\log4j-core-2.26.0.jar
Installed version : 2.26.0
Fixed version : 2.26.1
we are starting to already get scan flags for out of date log4j.
Any word on when there will be a further update for SoapUI to address these version updates?
To add to the already posed question - if there is no anticipated SoapUI release which addresses CVE-2026-49844, is there an impact to updating the log4j jars (core/api/slf4j2-impl) with 2.26.1 versions?
StaffHi hd94, thanks for raising.
I've raised with the team, and they now have it on the backlog planned for the next release, I cannot give a timescale, however coreyclamp's question leads me onto my interim remediation advise, you can update the jar manually, we do not anticipate issues with a fix release of log4j, but would advise reporting back either way, to help other viewers.
Thanks all,
Yousaf
