7.9859 (V7)

September 2026 security update for the XPLG V7 server: Apache Tomcat 10.1.57, Apache Log4j 2.26 and CVE fixes. Requires every instance on 7.9858.

What you will do: confirm every instance runs 7.9858, then publish the 7.9859 patch and verify it.

Build 7.9859 is the newest V7 build (September 2026). It is a security update.

Prerequisites

  • Every XPLG instance must run 7.9858 before this patch is deployed. Check XPLG > System > About on each node: the Installed Version must read 7.9858. If it does not, apply 7.9858 first.
  • Java 17 and Tomcat 10 (patch 9001 or later) remain mandatory.
  • A valid V7 license (PortX > Settings > License).

Changes

Security updates

  • Apache Tomcat updated to 10.1.57.
  • Apache Log4j updated to 2.26.
  • Fixes for published Common Vulnerabilities and Exposures (CVEs).

Upgrade notes

  1. Read the current upgrade process on Upgrades before you start.
  2. Validate the update in a non-production environment first.
  3. Behind a load balancer, publish the patch by connecting directly to one cluster node, with all nodes selected.
  4. After the upgrade verify the installed version in XPLG > System > About on every node, then run the five validation phases.

The patch zip is linked from the upgrade guide on the XPLG wiki (size and MD5 published); keep it unextracted for Publish Patch.

Next: 7.9858

Source: XPLG wiki, pages 3179773959, 1597964372, 1689157633 (https://xpolog.atlassian.net/wiki/spaces/XPOL/pages/3179773959).