Disclaimer: The security issues below do not yet have publicly disclosed CVE identifiers, so details regarding their severity, impact, and potential attack vectors are not fully available at this time. This post will be updated as soon as additional information becomes available. Important: GLPI security update Type/Severity NetEye Product Security has rated this update as…
Read MoreDisclaimer: The security issues referenced below do not yet have publicly disclosed CVE identifiers, so they are referenced by GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the icinga…
Read MoreDisclaimer: The CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not available at this time. This post will be updated as soon as additional information becomes publicly available. Update: The CVEs referenced below have now been publicly disclosed, and additional details have been…
Read More
What happens when Artificial Intelligence becomes part of everyday IT Operations? Where can it help teams work faster and see more, and where do human expertise and judgement remain essential? These questions shaped the NetEye Conference 2026, held at the Crowne Plaza Verona – Fiera on 22 October. Under the theme “AI & Human Insight:…
Read MoreAsset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, /glpi/front/inventory.php. However, agents that rely on the glpiinventory plugin may also exchange data with the…
Read MoreNagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: The Icinga DB backend silently ignored both options, so service states were always merged into the hostgroup summary, and exclusion rules were never applied. As a result, a…
Read MoreImportant: PHP security update Type/Severity NetEye Product Security has rated this update as having a CRITICAL security impact. Topic Updates for the php and glpi packages are now available for NetEye 4. Security Fix for All NetEye Releases Security Fix for NetEye 4.50 Security Fix for NetEye 4.49 CVEs 1. CVE-2026-109618 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H2. CVE-2026-109619 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H3. CVE-2026-91765 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H4. CVE-2025-14181 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H5. CVE-2026-91767 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H6. CVE-2026-91768 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N7. CVE-2026-91766 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N8. CVE-2026-92842 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N9. CVE-2026-93682 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N10. CVE-2026-6103 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N11. CVE-2026-91769 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N12. CVE-2025-1218 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L The two most severe CVEs can be triggered by an unauthenticated remote attacker who sends crafted HTTP requests to a PHP…
Read MoreImportant: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Two of the three CVEs are reachable by any low-privileged authenticated user: an oversized request to the Prometheus rule…
Read MoreRKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources as failed, potentially resulting in brief service interruptions. This behavior was triggered by a routine…
Read MoreGraph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the following packages have been updated: Reduced unnecessary Keycloak login events We fixed an issue that…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: CVEs Most of the 19 CVEs are Missing/Incorrect Authorization flaws in the Admin REST API and Fine-Grained Admin Permissions (FGAP) v2:…
Read More
What happens when Monitoring, Observability and Cybersecurity are no longer treated as separate disciplines? How can organizations gain a better understanding of complex IT environments? How can they identify relevant threats at an early stage? And how can they turn growing volumes of data and alerts into informed decisions? These were some of the key…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary The list of vulnerabilities, regarding to the bundled plugins, patched in this update is: For details on how to apply this…
Read MoreGLPI: Fix of the upgrade to NetEye 4.50 when custom GLPI plugins are installed During the upgrade to NetEye 4.50, NetEye moves the GLPI plugins that you installed manually out of the folder /usr/share/glpi/plugins. Before this fix, NetEye did not correctly identify which plugins were installed manually. On NetEye clusters with manually installed plugins, the…
Read MoreTornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a large number of syslog events on Tornado. Until now, there was no way to turn…
Read More