End of Life

EOL denotes the end of a product's life cycle: after that, the vendor no longer ships security updates. Newly discovered vulnerabilities remain permanently open in EOL software, even if they are actively exploited. EOL systems therefore belong at the top of every risk list.