Documentation forNetwork Performance Monitor

NPM 2026.4 release notes

Release date: October 20, 2026

Here's what's new in NPM 2026.4. You can find the applicable system requirements here.

Skipping a version? If you're upgrading from more than one version back, don't rely on this page alone — review the release notes aggregator to see everything that changed across the versions you’re skipping, and across your SolarWinds Platform products.

To view release notes, system requirements, and product guide (formerly known as administrator guide) PDFs for supported versions of NPM, see NPM previous versions.

NPM runs on the SolarWinds Platform (self-hosted). NPM release notes include the updates from the SolarWinds Platform (self-hosted).

Critical update advisories

Critical update advisories alert you to key prerequisites, system environment updates, and operational changes in this release. Review these details carefully before initiating an upgrade to ensure a smooth deployment.

Legacy wireless SWIS entities

Legacy wireless SWIS entities were removed in this release. As a consequence, custom alerts, reports, or widgets using the removed SWIS entities stop working. Replace the legacy SWIS entities with currently supported ones. See this topic for details.

SolarWinds Message Bus replaces RabbitMQ

All deployments that do not have High Availability configured will be upgraded to the new message bus, SolarWinds Message Bus, replacing RabbitMQ. In previous versions, this migration was limited to only deployments with fewer than 300 nodes, fewer than 3 polling engines, and not using High Availability.

Passwords for passive WPM Players

Included in this release are changes to Web Performance Monitor (WPM) components. All features and platform modules are installed regardless of active licensing, as all SolarWinds Platform products share an underlying framework. SolarWinds recommends upgrading all environments at your earliest convenience to apply the latest performance and security fixes.

Three types of WPM player installations are affected by this update advisory:

  1. The default player installed on the main polling engine when SolarWinds Observability Self-Hosted was first installed.

  2. Remote players installed by the customer and configured for passive mode.

  3. Remote players installed by the customer in active mode.

After upgrading, passive WPM Players installed by default on the main polling engine (using Server-initiated communication) are switched to the active mode (using Player-initiated communication).

Passive WPM Players installed remotely are pre-filled with a randomly generated strong password during their automatic upgrade. This includes WPM Players with a disabled "Enable Upgrade" toggle. These are not upgraded to the latest version.

Active WPM Players (using Player-initiated communication) do not require a password to be set after the upgrade.

New features and improvements in NPM

Load Balancer F5 VELOS and R-Series support

Monitoring for F5 VELOS chassis and rSeries appliances now includes CPU and memory utilization, disk volumes, hardware health, machine type, and vendor details.

SD-WAN monitoring

Improvements in Cisco Catalyst SD-WAN vEdge (Viptela)

  • vEdge monitoring now includes dedicated Modern Dashboard views for SD-WAN Summary, Inventory, WAN Uplinks, and VPN Tunnels across orchestrator and edge contexts.

  • WAN Uplink views now expose transport type, IP information, carrier, status, and flap count.

  • VPN Tunnel views now expose source and peer transport types, latency, jitter, packet loss, quality score, tunnel state, and flaps.

Versa Networks devices

Added out-of-the-box monitoring support for Versa Networks SD-WAN devices.

Extended Ruckus switch monitoring

Monitoring Ruckus switches now covers switch stack topology and health, hardware sensors such as power supplies, temperature, and fan status, and VLAN configuration.

New features and improvements in SolarWinds Platform

SLA Mute mode for maintenance windows

Maintenance windows now support an SLA Mute state. In this state, monitoring and data collection continue, you can optionally mute alerting, and the SolarWinds Platform excludes the period from availability and SLA calculations. Unmanaging or disabling an object stops monitoring entirely, while SLA Mute keeps the object monitored during planned maintenance.

Redesigned network discovery

Network discovery has a redesigned workflow that uses the same interaction patterns as the rest of the modernized SolarWinds Platform Web Console and takes fewer steps to bring devices under monitoring.

  • To add SD-WAN devices, use the legacy wizard. Support for adding SD-WAN devices will be added in a future release.

  • You can switch between the legacy and new discovery wizards at any time.

  • In large environments, discovery uses the main polling engine by default instead of the polling engine with the lowest engine ID.

High availability

  • The High Availability panel now refreshes pool and member status and member roles every 10 seconds, so the information stays accurate during a failover.

  • A new HA status of 'Failover in progress' is now shown while a failover runs.

  • Updated the HA Failover Action to better support multi-member pools.

  • Improved audit events for HA Repair and HA server role changes.

  • SolarWinds Platform Agents are supported on polling engines in multi-cluster HA pools with m:n active/standby members. Agents connect to the correct engine and are automatically redirected to another engine during a failover.

  • Engine load balancing now includes nodes polled through WMI and WinRM, in addition to nodes polled through ICMP and SNMP. See Balance load on additional polling engines in an HA pool.

Alert when a device stops sending SNMP traps

A new out-of-the-box alert triggers when a device does not send an SNMP trap within a time period that you specify. Use this alert to detect silent failures on devices that cannot be polled, such as a trap source behind a data diode.

Asset ID included in forwarded alerts

Alerts forwarded to integrated service management tools, including SolarWinds Service Desk, ServiceNow, and SolarWinds Incident Response, now include the Asset ID of the affected entity. The receiving tool can link the incident to the exact configuration item in its configuration management database (CMDB).

Accessibility improvements

Updated accessibility support for keyboard navigation, ARIA roles and semantics, and screen readers to help meet Section 508 requirements.

  • HTML and ARIA accessibility: Corrected heading semantics, breadcrumb roles, and required parent roles for tables and menus. Added accessible names for overlays and switches, and corrected invalid or incomplete ARIA relationships.

  • Keyboard accessibility: Enabled keyboard access to scrollable regions and search controls, improved the focus order in search, and removed focusable elements nested within other interactive controls.

  • Search and main menu accessibility: Improved focus indicators and contrast, keyboard activation, Enter and Escape key behavior, accessible labels, and screen reader support for search controls.

  • Interactive controls: Corrected nested interactive elements in radio controls and list items.

API and SDK Authentication

OAuth

  • OAuth is available for on-premises connectors that access the SolarWinds Information Service (SWIS) API, and in SWQL Studio.

API token

  • You can create an API token for an individual user account and use it instead of a password to authenticate automation against the SolarWinds Platform.

  • If an API Token is created for a non-admin account, the user can disable, regenerate the token, or delete it by navigating to their profile.

See JWT from an API Token for details.

Scalability updates

A SolarWinds Platform Web Server now supports up to 150 concurrent user sessions, an increase from 100.

Concurrent users are counted as users interacting with the SolarWinds Platform Web Console within a 30-second window. Hardware requirements depend on the number of concurrent users supported.

FIPS 140-3 compliance

When deployed in FIPS-approved mode, SolarWinds Observability Self-Hosted 2026.4 and all listed modules are FIPS 140-3 ready, with documented exceptions.

Database Performance Analyzer Integration Module improvements

The following improvements have been added to the Database Performance Analyzer Integration Module (DPAIM):

  • Cloud SQL databases monitored by DPA can be automatically discovered through DPAIM. Configuration changes are synchronized and obsolete cloud relationships are cleaned up automatically when cloud resources or accounts are deleted.

  • From the DPA Server Management page, you can now edit the properties of an integrated DPA server without having to remove and then reestablish the integration.

Additional updates

  • Added the SWQL function String_Agg(), which combines values from multiple rows into a single delimited cell.

  • Added support for Microsoft Entra ID authentication between the SolarWinds Platform and the SQL Server. Changing to this new authentication type is performed in the Configuration wizard. The following Microsoft Entra authentication options have been added:

    • Microsoft Entra Password

    • Microsoft Entra Integrated

    • Microsoft Entra Service Principal

    • Microsoft Entra Managed Identity

  • Users can schedule regular maintenance with unlimited duration.

  • Updated the maintenance notification on the Node Details page to allow for easier reading.

  • Migrated the Node Details Interface tab from legacy user interface.

  • Automatic migration of the deprecated Unmanage Scheduling Utility (Unmanage Task Editor) jobs: When you upgrade, the Configuration wizard migrates existing Unmanage Scheduling Utility schedules to the Manage Schedules page. Schedules that reside on a standby server in a High Availability pool are not migrated. Recreate those schedules manually on the Manage Schedules page.

    Windows schedules that reside on a standby server in a High Availability pool are not migrated by the Configuration wizard. Recreate them manually on the Manage Schedules page.

  • Hardware Health data is now collected for additional Aruba switch models, including the Aruba 2930F/2930M VSF virtual chassis and the Aruba 5406R zl2 and 5412R zl2.

    Matching SNMP nodes with no Hardware Health data are rescanned for hardware sensors during upgrade.

  • All deployments that do not have High Availability configured will be upgraded to the new message bus, SolarWinds Message Bus, replacing RabbitMQ. In previous versions, this migration was limited to only deployments with fewer than 300 nodes, fewer than 3 polling engines, and not using High Availability.

    SolarWinds Message Bus is only used for licensed upgrades. Fresh installations and evaluations keep using RabbitMQ.

  • For Modern Dashboard Global Filters, additional clarification was added when editing the Global Filter Configuration page to inform a user that additional updates to SWQL might be required if a Custom Property is selected.

  • All SolarWinds Platform services now run on .NET 10 and .NET Framework 4.8. SolarWinds Platform no longer installs or uses the .NET 8 runtimes.

  • Updated legacy Node Detail views with missing conditional options to hide view if it was not applicable to respective node. Conditions can be seen by editing the Node Detail page and selecting the left-hand tab.

Fixed CVEs

At SolarWinds, we prioritize the swift resolution of CVEs to ensure the security and integrity of our software. In this release, we have successfully addressed the following CVEs.

SolarWinds CVEs

SolarWinds would like to thank our Security Researchers below for reporting on the issue in a responsible manner and working with our security, product, and engineering teams to fix the vulnerability.

CVE-ID Vulnerability Title Description Severity Credit
CVE-2026-28328 SolarWinds Observability Self-Hosted broken authorization schema (CVE-2026-28328) SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions. 8.8 Dimitrios Titos from NATO, Georgios Sotiriadis from NATO, Frank Lycops from NATO
CVE-2026-28329 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) (CVE-2026-28329) SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations. 6.4 Dimitrios Titos from NATO, Georgios Sotiriadis from NATO, Frank Lycops from NATO
CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability (CVE-2026-28330) SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages. 4.6 Dimitrios Titos from NATO, Georgios Sotiriadis from NATO, Frank Lycops from NATO

Third-party CVEs

CVE-ID Vulnerability title Description Severity
CVE-2026-42789 Non-CA certificate accepted as intermediate issuer in public_key path validation Erlang/OTP public_key incorrectly accepts a non-CA certificate as an intermediate issuer, allowing certificate chain forgery. 8
CVE-2026-42790 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification TLS hostname verification can be bypassed through a Subject CommonName fallback, potentially allowing an attacker to spoof a trusted hostname. 7.6
CVE-2026-22007 Oracle Java SE Security vulnerability allowing unauthorized read access to a subset of accessible data Local, difficult-to-exploit Java Security vulnerability allowing limited unauthorized read access to Java-accessible data. 2.9
CVE-2026-22008 Oracle Java SE Libraries vulnerability allowing unauthorized modification of accessible data Java Libraries vulnerability that can allow unauthorized modification of some Java-accessible data; primarily relevant to sandboxed/untrusted Java deployments. 3.7
CVE-2026-22013 Oracle Java SE JGSS vulnerability allowing unauthorized access to critical data Java security protection-mechanism failure that may expose critical data; requires user interaction and is mainly relevant to untrusted/sandboxed Java deployments. 5.3
CVE-2026-22016 Oracle Java SE JAXP vulnerability allowing unauthorized access to critical data Network-exploitable Java vulnerability allowing unauthorized access to critical Java-accessible data. 7.5
CVE-2026-22018 Oracle Java SE Libraries vulnerability allowing partial denial of service Resource-allocation vulnerability that can cause partial denial of service in Java SE. 3.7
CVE-2026-22021 Oracle Java SE JSSE vulnerability allowing partial denial of service HTTPS-exploitable Java vulnerability allowing an attacker to cause a partial denial of service. 5.3
CVE-2026-34268 Oracle Java SE Security vulnerability allowing unauthorized read access to a subset of accessible data Local, difficult-to-exploit Java Security vulnerability allowing limited unauthorized read access to Java-accessible data. 2.9
CVE-2026-34282 Oracle Java SE Networking vulnerability allowing denial of service through hang or repeatable crash Network-exploitable Java vulnerability that can cause a hang or repeatedly trigger crashes, resulting in complete denial of service. 7.5
CVE-2026-23865 FreeType integer overflow leading to out-of-bounds read when parsing OpenType variable fonts Integer overflow in FreeType can cause an out-of-bounds read when parsing OpenType variable-font tables. 5.3

Fixed customer issues

Case number Description Platform product
01744792

When a user specifies an empty database during database configuration, the Configuration Wizard no longer checks the database branding version, and the following message is not displayed:

An exception occurred when fetching the DB branding version.

Platform
00640947, 01051755, 01076777, 01623669, 01680694, 01687213, 01965097, 02061571

Interface Alias column length has increased to 255 characters, allowing longer interface descriptions to be properly collected and displayed without truncation.

 NPM
00319360, 00427016, 00507187, 00762394, 01039752, 01626993, 01925972, 02175470

When the option 'Operationally down' is selected in Network Discovery, administratively shut down interfaces are also imported by default. The setting Discovery-SkipInterfacePortByAdministrativeStatusOnImports is now available to change the default behavior. When this setting is enabled, administratively shut down interfaces are imported only when the 'Administratively shutdown' option is selected.

The new setting can be enabled by issuing a command to the database:

update Settings set CurrentValue = 1 where SettingID = 'Discovery-SkipInterfacePortByAdministrativeStatusOnImports'

NPM
01683539 Status icons load correctly for all supported interface types. NPM
01791596

On the Edit Account page, the SecurityTab Menu Bar is now available and can be assigned to views.

 Platform
01791596, 01802623, 01976085, 02076730

During upgrades, the system check now determines whether the WebSocket protocol for IIS is enabled, and displays a message if it is not. Intelligent Maps use this protocol to efficiently display real-time changes. If this protocol is disabled, live updates work, but performance is slower.

The message includes a link to the Support article How to Enable the WebSocket Protocol for the SolarWinds Platform.

Platform
00952585, 01025487, 01676765, 01692130, 01759425, 01972362, 01984154, 02052155, 02135512, 02151844 Performance related to processing wireless collector data has been improved. In previous versions, wireless collector data processing could lead to database maintenance errors, high memory usage, or polling issues. NPM
01692130, 01776286, 01899647, 01976398 To improve web performance and system load times, nodes-related data operations use the db.entities framework efficiently, reducing blocking, excessive reads, and slow updates across partitioned tables. Platform
01892652

When database connectivity is lost, the alerting engine remains stable and does not stop and restart repeatedly across the primary and secondary HA servers.

 Platform
01972784 The Mandatory Notice appears only once during SAML authentication and subsequent dashboard access. Platform
01634745, 01940097, 02068093 Cisco Wireless Controller polling now supports the CISCO-LWAPP-WLAN-MIB in addition to the AIRESPACE-WIRELESS-MIB. Admins can configure a preferred MIB globally or per node, allowing the system to automatically fallback and enrich wireless data for access points, interfaces, clients, and SSIDs. NPM
02028380

When an agent-monitored node is moved to a different polling engine, the node remains up and polling continues.

Platform
02119564 HA pool setup correctly treats the Virtual IP address and Hostname as optional. If a Virtual IP address is entered and then cleared, it is no longer cached. Platform
02036022 The Status Summary resource, which was intended for EOC deployments, can no longer be added to views in other SolarWinds Observability Self-Hosted deployments. Platform
02039738

Custom properties named FailoverStatus or SyncStatus no longer prevent F5 resources from opening or cause the Configuration Wizard to fail with an Ambiguous column name error.

 NPM
02035418

Discovery now detects Power Conversion Units (PCUs) with newer firmware that uses a different date format, and upgrading an existing node to the newer firmware does not affect polling.

 Platform
02045443

Manage Nodes, Alerts, and Reports no longer display duplicate entries for Power Control Units (PCUs) or UPS devices, ensuring accurate data organization and clean user interface filtering.

 Platform
02038245

List resources jobs on SolarWinds Agent nodes now provide traceable life cycle logging across creation, scheduling, propagation, and execution stages.

 Platform
02046127, 02117091 Metrics are correctly collected for Azure Express Route Virtual Network Gateways. NPM
02037173

When a report with a comma in the title is exported to Excel using the Export to Excel button, the file name is no longer truncated.

 Platform
02173415

As you drill down through entities in the Modern Dashboards Entity Drilldown resource, breadcrumbs display information about previous selections and can be used for navigation.

 Platform
N/A The Force-enable multi-subnet failover setting is applied to the database connection string for all supported SQL Server authentication methods. Platform
02083215

When you set up a one-time scheduled maintenance job, the interval is scheduled correctly even if the client and server are in different time zones.

 Platform
02069681, 02135654, 02134762, 02142137

Ruckus SmartZone polling handles null uplink and downlink rates without errors and continues displaying wireless data.

 NPM
02135171, 02161717

In the Add Node or Edit Node wizard, if the gMSA Account option is selected for a node that uses WMI polling, the Connection Mode automatically changes to WinRMOnly, and the Authentication Mechanism changes to Kerberos. These changes enable successful gMSA authentication.

If the gMSA Account option is later deselected, these options revert to their previous values.

 Platform
02093182, 02099195, 02104654, 02165764, 02168101, 02176177 Polling Completion displays 100% for new installations and accurately aggregates job engine completion values after polling activity begins. Platform
N/A Job Engine v3 reliably processes job requests even when request-body data arrives slowly. Platform
02081056 Database maintenance removes orphaned data across GCP services, preventing stale cloud entities from consuming license capacity. Platform
02101101 The Node Details Poller has been improved to reliably poll certain OIDs, allowing the associated devices to be added. Platform
02025395

When an anomaly-based alert is triggered and a user adds notes to the triggered alert instance, the alert entity details page displays the correct data, not There is no data to show.

 Platform
02054679 The All IP Addresses on Node resource correctly displays both IPv4 and IPv6 address information for SNMP nodes. Platform
02109883

HA pools remain healthy and standby APEs start correctly after upgrades without duplicate engine records or manual database cleanup.

 Platform
N/A Audit events for moving an exact node into or out of Load Balancing display the node caption as a link to its details. Platform
02132955, 00839577 Audit events accurately record an alert’s current enabled or disabled state after each change. Platform
N/A SWQL alert enable and disable actions are recorded in audit logs as Alert Enabled or Alert Disabled events. Platform
02113768 The AD test correctly validates wildcard certificates assigned to website SSL bindings. Platform
02097908, 02102350 The Orion.NetObjectDowntime table accurately reflects nodes whose current status is Up. Platform
02102003, 02098769

When Linux nodes are polled with the SolarWinds Agent using SNMPv2c or SNMPv3, Asset Inventory retrieves and displays all results.

Platform
N/A HA pool actions remain available after canceling the force-failover dialog. Platform
02070584, 02141068, 02153394

The MIB database installer can be run from the Windows user interface. Starting the installer from the command line is no longer required.

NPM
01484292, 02114456 When new agents are added, the resulting notification accurately reports the number of agents that were added. Platform
02084409, 02101320, 02141125 The Meraki API client follows HTTP 308 redirects to shard-specific cloud endpoints, allowing onboarding and polling to complete successfully. NPM
02069085

Exporting a report to a PDF no longer fails when an alternative PDF engine is used.

 Platform
02118385

When a custom certificate cannot be used for the SWIS REST API endpoint (for example, because of a missing or inaccessible private key), the issue no longer prevents SWIS from starting. The issue is logged, and the SolarWinds certificate is used instead.

 Platform
02073197 The MS Graph SMTP client configuration provides a link to a Support article with configuration information. Platform
02071129 OSPF routing neighbor polling now automatically ignores invalid 0.0.0.0 router IDs to prevent duplicate database entries and inaccurate alert statuses. NPM
02055084, 02115513, 02151844 Administrators can override the collector BatchCountLimit for Hardware Health and SwitchStack polling to keep collector queues manageable. The centralized settings BatchCountLimit and BatchExpirationMilliseconds are now available. NPM
02120230 An issue that caused the Job Engine to truncate data polling to stop was resolved. Platform
02109761, 02125559, 02130782

When a deployment does not include a license for NCM, the Configuration Wizard no longer creates the NCM Nodes view.

When the NCM Nodes view was created without the NCM BusinessLayer to keep it synchronized, the view could become corrupt and cause polling and other features to fail.

 Platform
02034433 PerfStack projects now maintain unique metric-entity pairs when multiple entities are added or project data is loaded. Platform
02104938, 02136724, 02130258, 02132847

Values in the Weight column of the CPUMultiLoad_CS_cur table are no longer saved as 0, which prevents database maintenance from failing with divide-by-zero errors.

Platform
02129893 The Next Run column in the Upcoming Maintenance Schedules resource no longer displays Invalid Date if the browser's language is not EN-US. Platform
02129334 When the ImportCannedReports task fails, the Configuration Wizard provides detailed information about the issue. Platform
02126753 When the Text > Content dialog is opened from a node on an Intelligent Map, custom properties with names that include id are no longer missing from the dialog. Platform
02132078 Database connections use a default connect timeout of 120 seconds, which prevents issues with the Configuration Wizard. Platform
02114659 An issue was fixed that caused Intelligent Maps to display incorrect node statuses. Platform
02055084, 02115513

When an entity is missing the DataRingRedundant property, SwitchStack processing no longer fails with an ArgumentOutOfRangeException, leaving polled data uncommitted. A default DataRingRedundant property is assigned, and processing continues.

 NPM
02132721 SolarWinds Deployment Health correctly distinguishes Azure SQL Database from Azure SQL Managed Instance when evaluating database time zones. Platform
02145372 The machine type for APC Automatic Transfer Switch 4G devices is no longer incorrectly identified as Smart-UPS 9605. Platform
01967985, 02110438, 00924965, 01084552 Memory is reported accurately for Linux devices with available valid extended 64-bit memory OIDs. Platform
02139334

The Configuration Wizard no longer fails to upgrade with the following error because an incorrect database version was reported:

Invalid object name 'dbo.NCM_VulnerabilitiesAnnouncementsNodes'.

Platform
02118726, 02106120, 02139711, 02144082

The centralized setting SkipNotification was added to enable a periodic reconciliation timer that ensures notifications of scheduled jobs are not missed because of a temporary message bus outage or connection interruption. This setting is off by default. If needed, contact Support to enable the setting.

This fix is also included in the 2026.2.3 release.

Platform
N/A The out-of-the-box Duplex Mismatch alert more accurately identifies interfaces with mismatched duplex modes. NPM
02144215, 02158471 Azure Cosmos DB database maintenance completes successfully when data is moved to the next gradation level. Platform
02162083 WMI connections now use an increased connection timeout with a separate configurable query timeout. Platform
02120396

An unsupported Windows time zone ID in a scheduled job no longer prevents the Core Business Layer from starting.

Platform
02138099

When installing a scalability engine fails because the product catalog is corrupted or could not be downloaded, the error message provides a link to a Support article with additional information.

Platform
02123605 OpenTlsConnection accepts valid SQL data source formats with a space before the port. Platform
02142112

Meraki MX appliance VLAN and interface IP addresses are correctly imported and indexed, and the NetFlow receiver does not treat them as unmanaged devices and discard the flows.

 NPM
02164520 After the polling method for a node has been changed, polling errors from the previous polling method no longer persist and incorrectly affect the node's status. Platform
02159858

The Link to Thin AP Device view and Link to Autonomous AP Device view no longer cross-link an AP to the wrong counterpart when one AP's IP address is a substring of another IP address. Exact IP matching is now used.

NPM
02158968 Date/Time custom properties save dates with the correct year, including years 2030 and later. Platform
02158849, 02159896, 02163696, 02165947, 02166951, 02168049, 02169367, 02172661, 02173782, 02180056

Time synchronization issues between the SolarWinds Observability Self-Hosted server and a remote computer connected to the server do not prevent users from unmanaging or muting a node from the Manage Nodes page.

This fix is also included in the 2026.2.3 release.

Platform
02166138, 02164851 The Configuration Wizard removes deprecated VSAN functions from the database, preventing issues during database backup and maintenance operations. NPM
02116254

Cisco ASA Site-to-Site VPN pollers successfully collect and display tunnel information when remote addresses use dotted-format notation.

 NPM
02154649, 02168426, 02169475, 02171488

SWIS queries correctly apply filters on node custom properties, including global, dashboard, and URL filters.

 Platform
N/A

*Modern dashboard widgets return data for SWQL queries that include a FILTER ON clause, instead of failing with a subquery error.

This fix is also included in the 2026.2.3 release.

Platform
N/A When additional columns are added to a report with fixed column widths, those columns are displayed correctly when the report runs. Platform
N/A Running a High Availability repair now works correctly even if a SolarWinds service is unable to stop. Platform
02083369, 02026720, 02010290, 02097812, 02108965 *Platform Connect now runs a preflight connectivity and TLS readiness check before UAMS registration, detecting common problems such as blocked outbound ports, DNS resolution failures, TLS trust-chain issues, and blocked ALPN/HTTP2 negotiation. If an issue is detected, it displays clear remediation guidance instead of a late, unclear failure. Platform
02148084, 02168675, 02164466 *Node statistics collection no longer fails for an entire batch of nodes when a single node reports an unusually long ICMP response time. Response times that exceed the previous storage limit are now handled without causing bulk insert failures for other nodes. Platform
02123590, 02147402, 02161418 *Users are now warned before uninstalling the UAMS plugin in a High Availability environment because doing so without first disabling HA can lead to failover issues. Platform
02155686, 02119115, 02122152 *The Platform Connect wizard no longer fails to validate tokens and complete API calls when Internet access is through a proxy server. The wizard now respects the configured SolarWinds Platform proxy settings. Platform
N/A *The Node Details maintenance status information has been reformatted for readability when multiple planned maintenance jobs (mute, unmanage, and alert suppression) apply to a node at once. Platform
02130240 *An audit log entry is now recorded when a user attempts to log in with an incorrect password through LDAP authentication. Platform
02195545 *The Configuration Wizard no longer reports failed alert imports for canned alerts that belong to unlicensed or inactive modules. Platform
02170108 *The Platform Bridge UAMS plugin and other .NET-based UAMS plugins no longer randomly fail to start with a CryptographicException when parsing its client certificate. Platform
02182782 *Scheduled discovery configured on a Remote Collector no longer fails after the initial run. Subsequent scheduled discoveries now execute correctly. Platform
02103615, 02126355 *The Alerting Service no longer crashes when a background cleanup task encounters a recoverable SQL deadlock. Alert evaluation and cleanup continue running instead of stopping throughout the platform. Platform
02176816 *An Intelligent Map widget using Map Name Format on a legacy Group Summary page no longer fails to load the map when a view limitation is also configured. Platform
02188472

*When the Meraki Wireless API poller attempts to poll a wireless client that has no recentDeviceSerial value, the polling cycle no longer fails. Affected records are now skipped and logged instead.

 NPM
02187246 *Database maintenance for SD-WAN tunnel statistics no longer fails with a divide-by-zero error for FortiManager and Versa tunnels. New tunnel statistics rows are now persisted with a non-zero weight value. NPM
02203409

*Upgrades no longer fail because the deployment uses an older self-signed SolarWinds certificate signed with the SHA-1 algorithm. The Configuration Wizard now uses RabbitMQ instead of NATS as the message bus broker when the certificate has a SHA-1 signature.

 Platform
02187246, 02143453, 02188472, 02103487 *Meraki API polling has been optimized to reduce API call volume. Switch interface discovery, status polling, and IP-address collection now use organization-wide bulk endpoints instead of per-switch calls. Device availability and other endpoint responses are cached with configurable TTLs. SD-WAN performance and tunnel-statistics polling is skipped for passive HA appliances. IP-address polling can now be disabled per node, and client-side rate-limit handling and reporting have been corrected. NPM
02191321 *Adding or removing a group member whose entity (such as an IPSec tunnel) has a null status in SWIS no longer causes an Unexpected Website Error when saving group membership changes. NPM
02179634 *The Job Engine worker process no longer fails with an unhandled exception during WMI-based polling, improving background polling job stability. Platform
02166379

*A time series widget that includes a PerfStack project can now be edited. Editing is no longer blocked because the Starting timespan field is required but no value can be selected.

 Platform
02147435, 02157176 *The Edge Devices widget now displays the private management IP address for Fortinet FortiManager-polled Edge devices instead of the public WAN IP. Therefore, devices can be correctly matched with their corresponding SNMP-polled node. NPM
01733844, 02121093, 02127266 *Email notifications now attach PDF files using the correct application/pdf MIME type instead of plain/text. Therefore, mail clients correctly recognize PDF attachments. Platform
01943737, 02026892 *When a Palo Alto firewall REST API key expires or becomes invalid, the Palo Alto poller no longer fails subsequent polls until polling is disabled and re-enabled on the affected devices. When a 403 response or credential expired message is received, the API key is automatically refreshed. NPM

*This fix was added after the RC release.

Installation or upgrade

For new SolarWinds Platform deployments, download the installation file from the product page on https://www.solarwinds.com or from the Customer Portal. For more information, see Get the installer.

To activate your product in an existing SolarWinds Platform deployment, use the License Manager.

For upgrades, go to Settings > My Deployment to initiate the upgrade. The SolarWinds Installer upgrades your entire deployment (all SolarWinds Platform products and any scalability engines). For details about upgrading from earlier versions, see Supported upgrade paths.

For more information, see the SolarWinds Platform Product Installation and Upgrade Guide.

For supported upgrade paths, see Upgrade an existing deployment.

Before you upgrade!

All deployments that do not have High Availability configured will be upgraded to the new message bus, SolarWinds Message Bus, replacing RabbitMQ. In previous versions, this migration was limited to only deployments with fewer than 300 nodes, fewer than 3 polling engines, and not using High Availability.

End of life

Version EoL announcement EoE effective date EoL effective date
2024.4 October 20, 2026: End-of-Life (EoL) announcement – Customers on NPM version 2024.4 or earlier should begin transitioning to the latest version of NPM. November 20, 2026: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2024.4 or earlier will no longer actively be supported by SolarWinds. November 20, 2027: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2024.4.
2024.2 June 9, 2026: End-of-Life (EoL) announcement – Customers on NPM version 2024.2 or earlier should begin transitioning to the latest version of NPM. July 9, 2026: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2024.2 or earlier will no longer actively be supported by SolarWinds. July 9, 2027: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2024.2.
2024.1 February 10, 2026: End-of-Life (EoL) announcement – Customers on NPM version 2024.1 or earlier should begin transitioning to the latest version of NPM. March 12, 2026: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2024.1 or earlier will no longer actively be supported by SolarWinds. March 12, 2027: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2024.1.
2023.4 October 21, 2025: End-of-Life (EoL) announcement – Customers on NPM version 2023.4 or earlier should begin transitioning to the latest version of NPM. November 20, 2025: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2023.4 or earlier will no longer actively be supported by SolarWinds. November 20, 2026: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2023.4.
2023.3 October 21, 2025: End-of-Life (EoL) announcement – Customers on NPM version 2023.3 or earlier should begin transitioning to the latest version of NPM. November 20, 2025: End-of-Engineering (EoE) – Service releases, bug fixes, workarounds, and service packs for NPM version 2023.3 or earlier will no longer actively be supported by SolarWinds. November 20, 2026: End-of-Life (EoL) – SolarWinds will no longer provide technical support for NPM version 2023.3.

See the End of Life Policy for information about SolarWinds product life cycle phases. To see EoL dates for earlier NPM versions, see NPM release history.

End of support

This version of NPM no longer supports the following platforms and features.

Windows Server 2016

Windows Server 2016 is deprecated as of 2026.2. It is still available and supported in the current release, but will be removed in a future release.

SQLServer 2016

SQL Server 2016 is deprecated as of 2025.2. It is still available and supported in the current release, but will be removed in a future release. Consider using SQL Server 2022 or later.

Deprecation notice

The following platforms and features are still supported in the current release. However, they will be unsupported in a future release. Plan on upgrading deprecated platforms, and avoid using deprecated features.

Legacy wireless entities

Certain wireless SWIS entities are now deprecated and will be removed in a future version. SolarWinds recommends that you update custom alerts, reports, and widgets to use supported entities. See Deprecated wireless entities.

Unmanage Scheduling Utility

The Unmanage Scheduling Utility (Unmanage Task Editor) is deprecated as of 2026.2 and will be removed in a future release. To ensure continued support, schedule all new tasks using the web console Manage Schedules page.

Windows schedules that reside on a standby server in a High Availability pool are not migrated by the Configuration wizard. Recreate them manually on the Manage Schedules page.

Apache Mesos

Apache Mesos container monitoring is deprecated and will no longer be available in a future release. Migrate your monitored environment to Docker or Kubernetes 1.23+.

Kubernetes 1.16 - 1.22

Kubernetes 1.16 - 1.22 container monitoring is deprecated and will be removed in a future release. SolarWinds recommends upgrading your cluster to version 1.23 or later, then re-adding the service in SolarWinds Observability Self-Hosted.

Network Atlas

Network Atlas is deprecated as of Orion Platform 2020.2. It is still available and supported in the current release, but will be removed in a future release. Deprecation is an indication that you should avoid expanded use of this feature and formulate a plan to discontinue using the feature. SolarWinds recommends that you start using Intelligent Maps in the SolarWinds Platform Web Console to display maps of physical and logical relationships between entities monitored by the SolarWinds Platform products you have installed.

Starting with 2024.2, you can import Network Atlas maps to Intelligent Maps. See Import maps.

Legal notices

© 2026 SolarWinds Worldwide, LLC. All rights reserved.

This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates, and/or its respective licensors.

SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR USEFULNESS OF ANY INFORMATION CONTAINED HEREIN. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY, EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks or are registered or pending registration. All other trademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.