Originally posted by Jo-Laing on June 04, 2026
This release focuses primarily on important security and platform updates, including updates to key dependencies such as SLF4J and Log4j.
We’ve also migrated to Install4j 11, which brings improved compatibility with modern macOS versions through an updated installer experience.
Grab the latest release here
Release notes for reference: https://www.soapui.org/docs/downloads/release-notes/
Originally posted by hd94 on August 06, 2026
Path : C:\Program Files\SmartBear\SoapUI-5.10.0\lib\log4j-core-2.26.0.jar
Installed version : 2.26.0
Fixed version : 2.26.1
we are starting to already get scan flags for out of date log4j.
Any word on when there will be a further update for SoapUI to address these version updates?
Originally posted by coreyclamp on August 11, 2026
To add to the already posed question - if there is no anticipated SoapUI release which addresses CVE-2026-49844, is there an impact to updating the log4j jars (core/api/slf4j2-impl) with 2.26.1 versions?
Originally posted by yousaf on August 11, 2026
Hi hd94, thanks for raising.
I’ve raised with the team, and they now have it on the backlog planned for the next release, I cannot give a timescale, however coreyclamp’s question leads me onto my interim remediation advise, you can update the jar manually, we do not anticipate issues with a fix release of log4j, but would advise reporting back either way, to help other viewers.
Thanks all,
Yousaf
Originally posted by Faf on September 02, 2026
I may have found a bug and posted it in this forum.
Is there any update on when CVE-2026-49844 will be resolved in SOAPUI ?
Also, am i understanding correctly that you’re suggesting we can just replace the faulty File:
C:\Program Files\SmartBear\SoapUI-5.10.0\lib\log4j-core-2.26.0.jar
With the latest version here ?
Index of /logging/log4j/2.26.1
..it should just pickup the updated files?