26.6.0 Changelog

26.6.0

(2026-06-15)

A big thank you to the following 32 contributors this last month:

Thanks to maintainers and others that helped with pull requests this month:

Feature

  • Added SnmpEngineID to Core discovery and edit device page (#19685) - laf

Security

  • Update storage table to remove xss (#19896) - laf
  • Added validation for ajax/select/port filter (#19877) - laf
  • Check user has permission to access port for search_by_mac api function (#19876) - laf
  • Stop leaking data when host add fails via api (#19870) - laf
  • Stop widgets being moved that don’t belong to that dashboard (#19868) - laf
  • Fix some possible xss in various tables (#19867) - laf
  • Validate wireless sensor updates against static list (#19863) - laf
  • Add device permission check to add_eventlog api call (#19862) - laf
  • Added a csrf check into ajax_form.php (#19859) - laf
  • First round of updates to improve security (#19856) - laf
  • Permissions implementations and improvements (#19643) - murrant

Device

Webui

Alerting

Api

Discovery

Polling

Authentication

Bug

Refactor

Cleanup

Documentation

Translation

Tests

Misc

Dependencies

1 Like