What librenms/librenms shipped
Written by FoxPlug from public releases; not affiliated with Librenms. An automatic summary of the public release, pull request and commit data of github.com/librenms/librenms. Librenms did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- 26.9.1 bugfix release fixes billing polling, custom map pan/zoom, and IPMI locale issues. Release
- Device filter options now respect user permissions for location, device group, and poller group. Pull request #20643
- Device status reason now displayed when polling or discovering a down device. Pull request #20640
- IPMI sensor threshold float parsing fixed to handle locale and dirty-check issues. Pull request #20576
- ZFS wait-time graphs corrected to display milliseconds instead of raw nanoseconds. Pull request #20616
- PingCheck deferred alerts now execute for child devices using correct device lookup. Pull request #20610
- Fping can now run without specifying address family, letting fping choose automatically. Pull request #20641
- Email address parsing improved using Symfony Mime to correctly handle quoted names. Pull request #20605
- key:rotate command no longer blocks on confirmation when run with --no-interaction flag. Pull request #20639
Why it matters
This week addresses stability and correctness across core features: billing calculations work again, IPMI sensors parse thresholds properly in all locales, and permission checks prevent unauthorized filter visibility. Several data display fixes ensure ZFS graphs and device status messages show accurate information.
Changelog entry
- Permission checks added for device filter options (location, device group, poller group) Pull request #20643
- Device status reason included when polling or discovering a down device Pull request #20640
- ZFS wait-time graphs now display milliseconds instead of nanoseconds Pull request #20616
- PingCheck deferred alerts fixed for child device lookups Pull request #20610
- Email address parsing improved with Symfony Mime for quoted names Pull request #20605
- IPMI sensor threshold float parsing fixed for locale handling Pull request #20576
- Fping can run without specifying address family Pull request #20641
- key:rotate --no-interaction flag no longer blocks on confirmation Pull request #20639
- ZFS pool disk wait graphs fixed to read correct RRD file for Write series Pull request #20615
26.9.1 released. Fixes billing polling, IPMI sensor parsing with locale handling, and custom map settings. Permission checks tighten device filter visibility.
LibreNMS 26.9.1 is out with important fixes. Billing polling restored, IPMI sensor thresholds now parse correctly across locales, and device filter options properly respect user permissions. ZFS wait-time graphs display accurate milliseconds. Several additional refinements to device status reporting and ping functionality round out this maintenance release.
Week of September 14, 2026
What shipped
- Escaped default alert title definition to fix security vulnerability GHSA-9qcg-rgg9-mpjg. Pull request #20547
- Converted legacy API tokens to modern Sanctum tokens with backward compatibility for old format. Pull request #20528
- Added support for Palo Alto Networks Prisma SD-WAN ION appliances across 16 models. Pull request #20556
- Added SNR-OLT-GPON-16-2AC GPON OLT support with hardware, firmware, CPU, memory, temperature and transceiver discovery. Pull request #20558
- Added PoE power sensors for Netgear GS324TP with total budget and consumption reporting. Pull request #20480
- Health sensors widget now supports table mode with sorting by value and 100 entry hard cap. Pull request #20368
- Added complete Swedish translation covering all 27 PHP modules and JSON catalogue. Pull request #20167
- Replaced SnmpQueryMock with SnmprecSnmpBackend to read snmprec files directly with test optimizations. Pull request #20529
- Added error handling in Time::dateToMinutes() to catch malformed dates like those from APC UPS devices. Pull request #20577
- Fixed BGP peer discovery duplicates by setting
context_namein OS-specific modules and adding migration. Pull request #20560
Why it matters
This week includes critical security fixes for alert titles and API token handling, expanded device support for Palo Alto and Netgear equipment, and modernized token authentication. The Swedish translation and improved test infrastructure also enhance the project's accessibility and development experience.
Changelog entry
- Security: Escaped default alert title definition (GHSA-9qcg-rgg9-mpjg) Pull request #20547
- Security: Sanitized user and group inputs in LDAP search filters Pull request #20542
- Security: Prevented directory traversal in nfsen channel parameter Pull request #20540
- Security: Escaped device displayName and
sensor_descrin views Pull request #20539 - Security: Fixed oxidized XSS vulnerability Pull request #20538
- API: Converted legacy tokens to Sanctum with backward compatibility Pull request #20528
- Device: Added Palo Alto Networks Prisma SD-WAN ION support Pull request #20556
- Device: Added SNR-OLT-GPON-16-2AC GPON OLT support Pull request #20558
- Sensors: Added PoE power sensors for Netgear GS324TP Pull request #20480
- Sensors: Added Vertiv PDU GTHD temperature and humidity discovery Pull request #20567
- Widgets: Health sensors widget now supports table mode with sorting Pull request #20368
- UI: Improved custom maps with better zoom, dark mode, and mobile experience Pull request #20535
- Localization: Added complete Swedish translation Pull request #20167
- Fixes: Added error handling for malformed dates in Time::dateToMinutes() Pull request #20577
- Fixes: Fixed BGP peer discovery duplicates Pull request #20560
- Fixes: Fixed inventory loop due to duplicate index Pull request #20518
- Fixes: Device filter status down no longer affected by disable notify flag Pull request #20580
- Fixes: Fixed yaml snmpget exists checks comparison Pull request #20532
- Testing: Replaced SnmpQueryMock with SnmprecSnmpBackend for direct snmprec reading Pull request #20529
This week: security fixes for alert titles and LDAP injection, Palo Alto Prisma SD-WAN support, Netgear PoE sensors, Swedish translation, and API token modernization. Plus BGP duplicate fixes and improved error handling for malformed device data.
LibreNMS releases this week include important security updates addressing alert title escaping and LDAP filter sanitization, plus expanded device support for Palo Alto Networks Prisma SD-WAN ION and Netgear PoE switches. Major infrastructure improvements include modernized Sanctum-based API token handling with legacy support, a complete Swedish translation, and optimized SNMP test backend. Bug fixes address BGP peer duplicates, malformed date handling from UPS devices, and graph query parsing.