Documentation forNetwork Performance Monitor

NPM 2026.2 release notes

Release date: June 9, 2026

Here's what's new in NPM 2026.2. You can find the applicable system requirements here.

To view release notes, system requirements, and product guide PDFs for supported versions of NPM, see NPM previous versions. To view release notes for multiple versions and multiple SolarWinds Platform products on a single page, see the release notes aggregator.

NPM runs on the SolarWinds Platform (self-hosted). NPM release notes include the updates from the SolarWinds Platform (self-hosted).

New features and improvements in NPM

SD-WAN: Support for on-premises Fortinet FortiManagers

Extended SD-WAN monitoring for on-premises FortiManager deployments. This release adds API-based visibility into orchestrators, edge devices, and WAN uplinks, with support for on-premises authentication methods.

Extreme Networks switch monitoring

Extended Layer 2 and Layer 3 monitoring and hardware health visibility for Extreme switches. SolarWinds Observability Self-Hosted now collects additional L2/L3 data (MAC, VLAN, STP, routing) and adds a vendor-specific hardware health poller to monitor chassis temperature, fans, and power supply status on supported Extreme models.

Cisco modular hardware health

Improved hardware health monitoring for Cisco chassis. This release adds visibility into line cards, power supplies, and fan trays, including reset reasons and last status changes.

Updated ignored monitor types for F5 devices

The default ignored monitor types for F5 devices were updated to include additional, less commonly used monitor types. This reduces the number of API requests sent to F5 devices during each polling cycle.

To change which monitor types are ignored, update the value for IgnoredMonitorTypes in the F5 section of Centralized Settings. See Access the Advanced Configuration settings.

If you customized the value before upgrading, your existing values are preserved.

New features and improvements in SolarWinds Platform

Discovery Central page

  • A new Discovery Central page provides a single, modern entry point for discovering and managing monitored environments.

  • Users get an overview of what is currently monitored and can discover additional resources from a centralized location.

  • The Discovery Central page is available from the Settings menu and the top right corner of the top menu bar for administrators.

What's New page

The What's New page helps administrators quickly understand new features and important changes after upgrading. This page is meant to be interactive, allowing administrators to click directly into the new feature page. This page shows once for administrators after the first login following an upgrade. Later, it is available as a tab on the new Discovery Central page.

Simplified discovery wizards

  • Discovery wizards now defaults to essential configuration steps and provide links to advanced workflows for more complex scenarios.

High Availability

  • Increased the table view on the HA Pools tab for improved readability.

  • Extended hover behavior across table cells shows pool member roles.

  • Automatic selection of standby members for manual failover in 1:1 HA pools.

  • Simplified and condensed page header.

Engine load balancing

High availability deployments benefit from new engine load balancing, automatically distributing workloads more evenly across engines to improve performance and reliability. See Balance load on additional polling engines in an HA pool.

Expanded maintenance windows scheduling options

Administrators now have additional weekly and monthly scheduling options for maintenance windows, enabling greater flexibility for recurring events.

Alerting Engine – Condition-based suppression

Extended the alerting engine with a native Suppress Condition that applies to all alerts, allowing child alerts to be automatically muted when a related parent object is unhealthy. For example, interface or BGP peer alerts can be prevented from firing when the parent node is down. Suppressed alerts are still recorded for visibility and reporting, but trigger/reset actions and escalations are skipped, reducing alert noise from cascading failures across the environment.

Additional updates

  • Agent communications now support TLS 1.3, enhancing security by using the latest industry‑standard encryption protocols for data in transit.

  • Several enhancements improve the experience of editing and managing Intelligent Maps.

  • Introduced SolarWinds Message Bus Service to replace RabbitMQ.

    • This release only upgrades smaller deployments (fewer than 300 nodes, fewer than 3 polling engines, and not using High Availability).

    • Larger deployments will upgrade to SolarWinds Message Bus in a future release.

  • Added support for group Managed Service Accounts (gMSA) for authentication between the SolarWinds Platform and the SQL Server. This reduces reliance on manual service accounts and passwords. Customers can switch to gMSA authentication in the Configuration wizard. See Database authentication types.

  • Users without administrator privileges but with node management permissions can now access the Manage Agents page and manage SolarWinds Platform Agents.

  • DirectLink accounts can no longer be assigned administrator or node-management permissions.

  • Added agent support for RHEL 10.

  • Modern dashboard table widgets can now replace empty values with text "Unknown" instead of a blank value.

  • Added a Nodes with polling issues report. The report shows all nodes with polling issues, including the node name, assigned engine, start time, error code, and error message.

Fixed CVEs

At SolarWinds, we prioritize the swift resolution of CVEs to ensure the security and integrity of our software. In this release, we have successfully addressed the following CVEs.

SolarWinds CVEs

SolarWinds would like to thank our Security Researchers below for reporting on the issue in a responsible manner and working with our security, product, and engineering teams to fix the vulnerability.

CVE-ID Vulnerability Title Description Severity Credit
CVE-2026-28301 SolarWinds Observability Self-Hosted Open Redirect Vulnerability A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website. 4.8 Medium

Third-party CVEs

CVE-ID Vulnerability title Description Severity
CVE-2024-29133 Apache Commons Configuration Out-of-bounds Write Vulnerability Out-of-bounds write vulnerability in Apache Commons Configuration. This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. 5.4 Medium
CVE-2025-65637 Logrus Denial-of-Service Vulnerability A denial-of-service vulnerability exists in the Go logging library Logrus when Entry.Writer() processes a single-line payload larger than 64KB without newline characters. An attacker can trigger a bufio.Scanner failure causing the writer pipe to close permanently, resulting in application logging disruption and potential service unavailability. 7.5 High
CVE-2026-33186 gRPC-Go Authorization Bypass Vulnerability An authorization bypass vulnerability exists in gRPC-Go versions prior to 1.79.3 due to improper validation of the HTTP/2 :path pseudo-header. An attacker can send malformed requests without a leading slash to bypass path-based authorization policies and access protected gRPC methods when fallback allow rules are configured. 9.1 Critical

Fixed customer issues

Case number Description Platform product
00217758, 01009882, 01106411, 01120065, 01133252, 01573128, 01617154, 01994526 When Views by Device Type for a wireless module is set to default, it is no longer automatically changed to a different device type view. Platform
01436835, 01571825, 01965270

F5-specific SNMP settings are now available on the Polling Settings page, allowing you fine-tune the SNMP timeout, retry count, and max replies for F5 pollers. In addition, the default timeout value has been increased. These changes improve F5 polling reliability and reduce timeouts without affecting SNMP behavior for other devices.

NPM
01887898

Declarative Pipeline YAML parsing now correctly loads YAML definitions on systems using the Turkish locale by using an updated YAML parser, so configuration files are parsed without errors in this regional setting.

Platform
01894020, 01945929, 02088770

World Map management now saves manual map changes correctly on German-language installations, without showing SWIS query errors.

Platform
01915281 The performance of modern dashboard table widgets with horizontal threshold bars has been improved. Platform
01909120 When a SQL-based alert is triggered for a large number of nodes, the alert is triggered successfully and does not affect the performance of the Web Console. Platform
01943514

Hardware Health monitoring now keeps sensors visible when an unreachable device cannot be polled, changing their status to unknown instead of removing them from views, alerts, and reports.

Previously, unreachable nodes caused polling to silently report success with an empty result, which caused all hardware health sensor data to disappear from the UI, alerts, and reports. The advanced setting HardwareHealth.Pollers.HardwareHealth.SNMP.NPM.MaxSnmpTimeouts controls how many SNMP timeouts are tolerated before polling is considered failed. The default value is 3.

NPM
01961596

The advanced setting HardwareHealth.Data.HardwareHealth.IgnoredEventTypes is available to disable hardware health events generated by the collector during hardware health data processing. This can be used in environments with a large number of hardware health-capable nodes where limited connectivity results in SNMP request timeouts and causes many hardware health events to be generated. Accepted values are HardwareInfo, HardwareCategory, and HardwareItem. Separate multiple values with a comma.

NPM
02021566

An issue that caused the Configuration Wizard to fail with the following error was fixed:

Invalid object name 'Ctx_C_Orion_NetMan_CloudMonitoring_VirtualNetwork'

Platform
01975626, 02037128 All types of widgets can be removed from custom modern dashboards, including previously non-removable system widgets such as wireless access point components, so you can fully customize dashboard layouts. Platform
01981326, 01997101 Extra spaces at the beginning or end of custom property values are now removed before the value is saved to the database, so a value with an extra space (for example, "One ") will no longer be seen as different from that value without the extra space (for example, "One"). Platform
01961282 Orphaned record cleanup for the anomaly detection feature now runs more efficiently and removes stale anomaly-based alert and status records without causing heavy SWIS CPU usage in large environments. Platform
00535994, 02025253 In the Manage Nodes table, adding the Polling Engine column no longer blocks certain actions such as 'Poll Now', 'Unmanage Now', or 'Export Custom Properties'. Platform
02049659 When an item on a World Map has an incorrect instance ID value (for example, two node IDs for the same value), the map no longer fails to render, even if the system logs a clear warning. Platform
01951065 When widget settings include an entire URL with the primary web server domain, clicking that widget from an additional web server redirects to the primary web server. However, users that are logged in are no longer prompted to log in again. Platform
02030565, 02041758, 02046997, 02045991, 02045994 The installer now performs a preflight check to validate that the .NET8 versions match. Mismatched minor version numbers can cause upgrades to fail or the console to become inaccessible. Platform
02036053 Agent Management in HA environments now ignores disabled HA pools when sending connection details to agents, so agents no longer keep or receive misleading server information from inactive pool members. Platform
02041234

The WinRM/WMI SelectCommand for AppInsight now returns only the properties requested in a query instead of all properties, significantly lowering memory usage for large result sets such as IIS file statistics collection.

Platform
02049748 FortiGate bulk discovery now excludes inactive site-to-site tunnels when creating pollers, helping prevent unnecessary polling and collector queue growth in large environments. Platform
02049748 Declarative Pipeline collector engine assignment now correctly loads entities on the appropriate polling engine when the engine assignment is defined on a parent entity rather than on the entity itself, preventing misloaded entities and related collector log errors in environments that use this configuration. Platform
02055264

Alert integrations now ensure that when SolarWinds Observability Self-Hosted is integrated with ServiceNow, alert reset status is correctly synchronized to ServiceNow, and the SolarWinds Incident Response alert action works end-to-end so you can select an SIR instance, create incidents from alerts, and track their status updates directly in the SolarWinds Platform.

Platform
02053174

If an alert configuration becomes corrupted in the database, the alerting service no longer fails with the following error:

ERROR SolarWinds.Alerting.Service.AlertingService - Unhandled exception caught by Alerting Service.

Platform
02059145 Events resources and summaries now show event times consistently in the correct local time when the SolarWinds server, database server, and browser are in different time zones. Platform
02032695, 02043746, 02072558

An issue was resolved that caused the Configuration Wizard to fail during upgrades with the following message:

System.ServiceModel.EndpointNotFoundException: There was no endpoint listening

Platform
02064612

In Japanese and German environments, duplicated maps no longer show a different overall status than the original maps, even though they contain the same objects.

Platform
02043659

Network discovery deduplication controls now correctly honor the configuration that disables specific deduplication checks, allowing administrators to discover all intended nodes even when IP, MAC, or other deduplication rules are turned off.

Platform
02077323

Toolbar search fields now allow left and right arrow key movement inside the search box on affected pages, so you can move the text cursor with the keyboard as expected.

Platform
02071573

When a bulk update of Linux agents is performed and one or more agents does not have the .NET Framework installed, the update no longer fails.

Platform
02095727

Group and node status in the Web Console now stays consistent between the primary web server and additional web servers. Previously, the same object could show a different status (for example, Critical and OK) after the Configuration Wizard ran.

Platform
02046715

F5 LTM virtual server polling has been corrected so that the VirtualIPAddress / IPAddressIndex relationship is updated whenever the virtual IP (VIP) address changes, even when it was initially empty. This ensures that SolarWinds Observability Self-Hosted always uses the current VIP when correlating F5 virtual servers, which prevents missed or incorrect alerts when VIPs are reconfigured.

NPM
02056947

When an agent is assigned to an additional polling engine and automatic node creation is enabled, deploying the agent to the additional polling engine again after a failover to the primary polling engine no longer results in an error.

Platform
02068408

Discovery and report scheduling now correctly run advanced schedules from the specified Starting On date and time, instead of delaying the first run by an extra interval.

Platform
02045468, 02076938

SD-WAN tunnel processing failures on Cisco Viptela Orchestrator devices were resolved. The issue was caused by duplicate tunnels in the device response (same tunnel, different destination port). Tunnel handling has been updated to include the port in the peer name, so duplicate entries no longer trigger the error An item with the same key has already been added, and all Viptela tunnel data is polled and displayed correctly.

NPM
N/A

You can now change the number of rows shown on the new All Active Alerts page. The page is no longer always limited to 20 results.

Platform
02085101, 02086241

Discovery Ignore List now properly removes interfaces when you choose “Remove from Ignore List,” and those interfaces appear in scheduled discovery results again as expected.

Platform
02054680

Database Diagnostics were extended to include the new FortiGate firewall tunnel and virtual-domain tables or views, so diagnostics bundles now reliably capture configuration and metric data for FortiGate firewall devices without errors.

NPM
02080859

Node maintenance schedules now keep all node settings, such as credentials, intact when multiple schedules unmanage or remanage the same nodes at the same time. Previously, some settings could be cleared during these bulk actions.

Platform
02032093

On Arista switches with specific VLAN port configurations, VLAN-to-port mapping information was not being collected and displayed correctly. The issue has been resolved, and VLAN data is now accurately collected and reflected for affected devices.

NPM
02094703

Azure Virtual Network Gateways monitoring now continues to collect and store data even when some gateways do not have a Public IP address configured, preventing gaps in Azure gateway visibility caused by failed polling in these cases.

NPM
02099780, 02106827, 02107003

MIB Browser and Device Studio for SNMPv3 nodes now work correctly after upgrade, so you can browse and test OIDs on SNMPv3 devices without credential-related failures.

NPM
02106984

The Platform Connect advanced setting HideIconToAllUsers can now be used to hide the icon for all users without causing the Core Business Layer service to fail at startup.

Platform
02096472, 02103051, 02096398

When a user attempts to open the custom property editor from the legacy Manage Nodes view, the custom property editor now opens as expected instead of intermittently logging the user out and displaying the login dialog.

Platform
01931015, 02039092, 02093123

By default, the GET/POST alert action performs a header validation that can fail if the authorization header is not in the standard format. If this occurs, the centralized setting SendHttpRequestTokenHeaderValidation can be used to disable the header validation.

Platform
02119089, 02126304

*After you edit a group from the Group Details page, clicking Save or Cancel no longer results in the following error:

The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters.

Platform
02036053, 02098639 *Agent nodes are no longer blocked from communicating back to their assigned engine when HA is configured. Platform
N/A *When you add a note when acknowledging an alert, the note is no longer truncated. Platform
02089204, 02094641

*Azure SQL Database with Microsoft Entra ID (formerly Azure AD) authentication now allows the Feature Service and Business Layer to start correctly, so platform services can load and complete setup as expected.

Platform
02045693, 02124570

*Special characters in a gMSA account name no longer prevent authentication.

Platform
N/A *The Updates page now shows the correct previous product version on the My Deployment > Updates tab, so you see the latest service release from the prior version instead of only the immediately preceding release. Platform
02108292 *After switching to the modern UI, the All Active Alerts dashboard no longer resets to the legacy UI after a domain account user logs in again. Platform
02100252 *On modern dashboards, a global filter no longer fails to filter out data when the filter is based on a custom property. Platform
02101788, 02105439 *Network Atlas maps show the correct status for interfaces. Platform
02045443 *Managed Nodes no longer displays duplicate HA cluster members. Platform
01997061, 02121747 *When a KPI widget on a modern dashboard includes a link, reordering the widget no longer causes the link to stop working. Platform
01953554, 02081294 *The logic for matching CVEs to nodes has been improved to avoid incorrect matches. Platform

*This fix was added after the RC release.

Installation or upgrade

For new SolarWinds Platform deployments, download the installation file from the product page on https://www.solarwinds.com or from the Customer Portal. For more information, see Get the installer.

To activate your product in an existing SolarWinds Platform deployment, use the License Manager.

For upgrades, go to Settings > My Deployment to initiate the upgrade. The SolarWinds Installer upgrades your entire deployment (all SolarWinds Platform products and any scalability engines). For details about upgrading from earlier versions, see Supported upgrade paths.

For more information, see the SolarWinds Platform Product Installation and Upgrade Guide.

For supported upgrade paths, see Upgrade an existing deployment.

Known issues

Last updated: June 9, 2026

SolarWinds Platform installation or upgrade to version 2026.2 fails with Product Catalog Signature Validation (Authenticode UnknownError) due to missing root certificate

When you run the SolarWinds installer or start a Centralized Upgrade (CU), the installer verifies the digital signature of the product catalog before continuing. This check confirms the download is authentic and has not been tampered with.

The signature check relies on the Windows machine having the correct root certificate in its Trusted Root Certification Authorities store. If that root certificate is missing or outdated, Windows cannot validate the signature and the installation stops with an error.

Affected actions:

  • Running the online or offline installer

  • Running a Centralized Upgrade (CU)

  • Upgrading to SolarWinds Platform 2026.2 (both online and offline installers)

Resolution or workaround: For a workaround, see SolarWinds Platform Install or Upgrade to 2026.2 Fails with Product Catalog Signature Validation (Authenticode UnknownError) Due to Missing Root Certificate.

End of life

Version EoL announcement EoE effective date EoL effective date
2024.2 June 9, 2026: End-of-Life (EoL) announcement – Customers on NPM version 2024.2 or earlier should begin transitioning to the latest version of NPM. July 9, 2026: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2024.2 or earlier will no longer actively be supported by SolarWinds. July 9, 2027: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2024.2.
2024.1 February 10, 2026: End-of-Life (EoL) announcement – Customers on NPM version 2024.1 or earlier should begin transitioning to the latest version of NPM. March 12, 2026: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2024.1 or earlier will no longer actively be supported by SolarWinds. March 12, 2027: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2024.1.
2023.4 October 21, 2025: End-of-Life (EoL) announcement – Customers on NPM version 2023.4 or earlier should begin transitioning to the latest version of NPM. November 20, 2025: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2023.4 or earlier will no longer actively be supported by SolarWinds. November 20, 2026: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2023.4.
2023.3 October 21, 2025: End-of-Life (EoL) announcement – Customers on NPM version 2023.3 or earlier should begin transitioning to the latest version of NPM. November 20, 2025: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2023.3 or earlier will no longer actively be supported by SolarWinds. November 20, 2026: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2023.3.
2023.2 June 10, 2025: End-of-Life (EoL) announcement – Customers on NPM version 2023.2 or earlier should begin transitioning to the latest version of NPM. July 10, 2025: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2023.2 or earlier will no longer actively be supported by SolarWinds. July 10, 2026: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2023.2.

See the End of Life Policy for information about SolarWinds product life cycle phases. To see EoL dates for earlier NPM versions, see NPM release history.

End of support

This version of NPM no longer supports the following platforms and features.

SolarWinds Platform Agent support for Windows Server 2008 R2, Windows 7

Windows Server 2008 R2 and Windows 7 reached End of Life and are no longer supported by SolarWinds Platform Agents. To continue monitoring them, consider switching the polling method to remote monitoring with WMI.

Deprecation notice

The following platforms and features are still supported in the current release. However, they will be unsupported in a future release. Plan on upgrading deprecated platforms, and avoid using deprecated features.

Windows Server 2016

Windows Server 2016 is deprecated as of 2026.2. It is still available and supported in the current release, but will be removed in a future release.

Unmanage Scheduling Utility

The Unmanage Scheduling Utility (Unmanage Task Editor) is deprecated as of 2026.2 and will be removed in a future release. To ensure continued support, schedule all new tasks using the web console Manage Schedules page.

Apache Mesos

Apache Mesos container monitoring is deprecated and will no longer be available in a future release. Migrate your monitored environment to Docker or Kubernetes 1.23+.

Kubernetes 1.16 - 1.22

Kubernetes 1.16 - 1.22 container monitoring is deprecated and will be removed in a future release. SolarWinds recommends upgrading your cluster to version 1.23 or later, then re-adding the service in SolarWinds Observability Self-Hosted.

SQL Server 2016

SQL Server 2016 is deprecated as of 2025.2. It is still available and supported in the current release, but will be removed in a future release. Consider using SQL Server 2022 or later.

Network Atlas

Network Atlas is deprecated as of Orion Platform 2020.2. It is still available and supported in the current release, but will be removed in a future release. Deprecation is an indication that you should avoid expanded use of this feature and formulate a plan to discontinue using the feature. SolarWinds recommends that you start using Intelligent Maps in the SolarWinds Platform Web Console to display maps of physical and logical relationships between entities monitored by the SolarWinds Platform products you have installed.

Starting with 2024.2, you can import Network Atlas maps to Intelligent Maps. See Import maps.

Legal notices

© 2026 SolarWinds Worldwide, LLC. All rights reserved.

This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates, and/or its respective licensors.

SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR USEFULNESS OF ANY INFORMATION CONTAINED HEREIN. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY, EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks or are registered or pending registration. All other trademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.