The OCS Inventory Team is pleased to announce that our server version 2.12.6 has been released.

Security :
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ocsreports-ocs-inventory-ng

Web console :

• Fix some vulnerabilities by @charleneauger in #1697
  • Details :
    • CVE-2026-76175: Add check on del_check format to prevent non-numeric values
    • CVE-2026-76176: Add check on id format to prevent non-numeric values
    • CVE-2026-76177: Add check on deployment URL to prevent SSRF
    • CVE-2026-76174: Add checks on CSV file to prevent other file injection
    • CVE-2026-76178: Improve sanitization of notification HTML template

Communication server :

• Fix vulnerability by @charleneauger in OCSInventory-NG/OCSInventory-Server#491
  • Details :
    • Improve SQL duplicate query and check checksum value type

The OCS Inventory Team is pleased to announce that our server version 2.12.5 has been released.

Security :

• Fix CVE-2026-16475 : https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inclusion-de-archivos-locales-en-ocs-inventory

Web console :

• Prevent path traversal and enforce auth in teledeploy options by @Lea9250 in #1695
• fix(snmp): fix duplicate row in snmp inventory tables by @charleneauger in #1693
• Update CVSS field type to fix search by @charleneauger in #1691

Communication server :

• IPD : check if OCS_OPT_IPDISCOVER_LINK_TAG_NETWORK is enabled to work with TAG by @charleneauger in OCSInventory-NG/OCSInventory-Server#488
• Fix some vulnerabilities by @charleneauger in OCSInventory-NG/OCSInventory-Server#486

The OCS Inventory Team is pleased to announce that our server version 2.12.4 has been released.

Security :

• Fix CVE-2026-22675 : https://www.tenable.com/cve/CVE-2026-22675

Web console :

• Batteries refactoring by @fbomj in #1645
• Update de_DE.txt by @LMS235 in #1636
• Update workflow and remove useless files by @charleneauger in #1639
• Add count in Stats Charts by @wiltonsr in #1642
• Increasing the number of output lines for the convenience of displayi… by @kvolk2git in #1646
• Update ja_JP.txt by @matsuoki in #1669
• Add option that remove removed packages from the download activated packages by @Atineon in #1659
• Update ru_RU.txt by @m0hn in #1682
• Add BIOS serial and motherboard serial in the all computers page (main table). by @kvolk2git in #1650
• PHP Deprecated: Creation of dynamic property by @paramazo in #1656
• Add menu variable on chinese translation by @Atineon in #1657
• Update note sql date format by @charleneauger in #1658
• Fix [BUG] #1606 by @daCaPo in #1660
• Add prettyversion field to the filter query by @Atineon in #1661
• feat(hardware): log machine deletion in deleteDid() by @valentejorge in #1680
• Sync languages to be able translated with a tool + fixes by @DragonZX in #1522
• fix(ipd): fix ipd listing if tag option is enabled by @charleneauger in #1662
• refactor(language): update FR translation by @charleneauger in #1684

Communication server :

• New structure for the batteries table by @fbomj in #469
• Update workflow and remove useless files by @charleneauger in #467
• Add authentication support by @Lea9250 in #470
• Improve ipdiscover by @charleneauger in #475
• Write diff by @alacn1 in #460
• fix(server): return invalid agent if unauthorized characters for user… by @charleneauger in #483

The OCS Inventory Team is pleased to announce that our server version 2.12.3 has been released.

Web console :

• Updated translations
• Fix 500 error on logout
• Security fix on systemids (CVE-2024-42752)
• Security fix on uploaded filenames (CVE-2024-42755)
• Security fix on accountinfo (CVE-2024-42751)
• Security fix on CSV filter import (CVE-2024-42752)
• Security fix on URL parameters (CVE-2024-42754, CVE-2024-42753)
• TVALUE field in devices table updated to TEXT
• Add the possibility to ungroup multisearch results

The OCS Inventory Team is pleased to announce that our server version 2.12.2 has been released.

Web console :

• Add SNMP link tag configuration
• Improve CVE crontab
• Improve CVE process
• Improve IpDiscover display and loading
• Optimize TAG restriction loading
• Fix Ldap / SSO authentication
• Fix wrong translation codes
• Fix error in ocsbase_new.sql
• FIx warning in IpDiscover
• Fix PHP warnings
• Fix computer detail configuration saving
• Fix group deployment percent
• Fix search on table name with more than 1 underscore
• Security fix in software categories name
• Security fix in SNMP export configuration
• Security fix in computer detail
• Security fix in ORDER BY direction
• Security fix on column name
• Security fix on password comparision

Communication server :

• Add SNMP link tag configuration
• Improve API computer search with ORDER BY
• Improve IpDiscover inventory
• Fix deployement history
• Fix API specification file
• Fix missing options in apache configuration file

The OCS Inventory Team is pleased to announce that our server version 2.12.1 has been released.

Web console :

• Add destroy session at the end of crontabs
• Add software index to improve performance
• Add reconciliation between IpDiscover and SNMP devices
• Update german translation
• Improve deployment stats message
• Improve CAS connection
• Improve SSO connection
• Fix launch deployment option
• Fix search on computer details deployment page
• Fix XSS in uploaded notification template
• Fix accountinfo field types
• Fix blank page when using SSO_ONLY
• Fix prevent use of quotes in admin data
• Fix CVE example file URL
• Fix package group query if group is empty

Communication server :

• Fix forced deployment on groups
• Fix dynamic groups and special characters issue

The OCS Inventory Team is pleased to announce that our server version 2.12.0 has been released.

Web console :

• Add CVE search link
• Add settings to hide bios diagram on dashboard
• Add package deployment statistics on group page
• Add EXEC mode choice for linux bash script options in build package
• Add itmgmt_comments table to multisearch
• Add usb devices table in devices tab on computer details
• Add visual differenciation between active computers and archived computers
• Add no wrap text on server information if it is too long
• Add accountinfo type number
• Add crontab to clean orphan hardware_id
• Improve all software search filters
• Improve computer package deployment date format
• Improve all software crontab execution
• Improve crontab logs
• Improve software version
• Improve network scans
• Update empty-sql files
• Fix layouts not displaying for LDAP/CAS users
• Fix deployment end of line encoding for linux/macos
• Fix php-fpm 8.1 and php 8 warnings
• Fix import CSV in all software page if return of line is CR+LF
• Fix case sensitive schedule_wol tablename
• Fix advance configuration tab not hidden if is off
• Fix date format for Russian and Spanish translations
• Fix IpDiscover search function
• Fix SNMP multisearch
• Fix SNMP accountinfo
• Fix wrong collation being used for MariaDB
• Fix accountinfo type update
• Fix display of accountinfo value of type select,checkbox and radiobutton on multicriteria
• Fix require file path in all crontabs
• Fix notification execution
• Fix php warning on LDAP filters
• Fix all software count
• Fix checkbox not displayed in all computers
• Fix activation package if the port is in the URL
• Fix groups creation
• Fix hidden update agent teledeploy
• Fix accountinfo checkbox value with spaces
• Fix restrictive size of LDAP filter configuration fields
• Decode special html char &, < and >, except quotes to prevent SQL injection

Communication server :

• Improve network scans
• Improve software version
• Prevent SQL duplicate entry errors
• Fix not a HASH reference and fix old code behavior Snmp.pm
• Remove old softwares table references

The OCS Inventory Team is pleased to announce that our server version 2.11.1 has been released.

Web console :

• Fix rename column syntax not supported by MySQL < 8 and MariaDB < 10.5.2
• Fix multisearch with is null operator
• Fix user display page

The OCS Inventory Team is pleased to announce that our server version 2.11.0 has been released.

Web console :

• Add last inventory date in SNMP type
• Add migrate function to add lastdate column on existing SNMP type tables
• Add SNMP stats in dashboard (display only if SNMP is enabled)
• Add SNMP details page
• Add SNMP XML export on details page
• Add SNMP multisearch (display only if SNMP is enabled)
• Add CSV export all SNMP types
• Add administrative data for SNMP
• Add filter by OS / group / TAG / asset category in all software page
• Add filter by import computer name in CSV file in all software page
• Add right to manage saved searches
• Add manage layouts page
• Add layouts permissions in profile
• Add visiblity parameter to layout table (Only me / My group / All users)
• Add report notifications for static and dynamic groups
• Add all software count for restricted users
• Add tab for activated package in group page
• Improve and fix security
• Update traductions
• Update scheduledupdateagent.ps1
• Update ipdiscover date when peripherals updated
• Display the default DNS and gateway registered in hardware table in all computers page
• Get logged user for data entered in ipdiscover identified
• Fix adding new multisearch parameter after all software count redirection
• Fix wrong OR operator with is null in multisearch
• Fix generated query with doesn't contain parameter in multisearch
• Fix multisearch condition for lock result
• Fix missing parenthesis with is null parameter in multisearch
• Fix user data display after delete profile
• Fix all computers replay in dynamic groups
• Fix MySQL error traduction in install.php
• Fix group dropdown in computer details
• Fix CVE vendor normalize
• Fix LDAP filter number not displayed correctly
• Fix double utf-8 encode for the software dropdown in software category
• Fix layout column index changed when create new computer admin data
• Fix empty inserted value in EXPORT_SEP parameter
• Fix wrong charset on some tables
• Fix php warnings
• Fix typo
• Remove useless function files
• Remove all old SNMP details pages
• Removed all "All Computers" layouts due to change in saved data structure

Communication server :

• Add lastupdate API endpoint to retrieve last updated computers data
• Add more explicit ipdiscover logs
• Add first SNMP accountinfo row in DB for SNMP inventory
• Fix software deadlock
• Fix heavy DB load by prevent macaddress query

Notes :

• The LDAP fix remove the LDAP configuration
• The layout fix remove all layouts created in all computers page

The OCS Inventory Team is pleased to announce that our server version 2.10.0 has been released.

Web console :

• Add PHP8 compatibility
• Add layout feature
• Add archive/restore actions to GUI LOGS
• Add CAS connection feature
• Add custom interval configuration to Last Contact in dashboard
• Add plugin deployment for unix systems
• Add configuration to exclude archive machines from the interface
• Improve archive/restore feature
• Improve LDAP connection feature
• Improve Software category regex display
• Update password encryption
• Fix subnets loading taking to much time on login
• Fix activate package display for every language
• Fix archive/restore action
• Fix multisearch query if IS NULL operator
• Fix software category deletion
• Fix SNMP read mib files
• Fix save search group for LDAP and CAS users
• Fix rights on actions column
• Fix CVE 2021-46355
• Fix IpDiscover export
• Fix IpDiscover bugs
• Fix blank page after create networks type
• Remove overriding of profile rights on extensions pages

Communication server :

• Improve compare server version and user agent version
• Fix software category inventory
• Force update BIOS datas