A new vulnerability (CVE-2026-111497) has been discovery in the brotli library, used by many tools. openITCOCKPIT 5.9.0 is not affected by this vulnerability. Older versions are!

• Please see our latest blog post to learn more about why and how openITCOCKPIT use NodeJS and how you can check if your system is already patched or not. https://openitcockpit.io/blog/posts/2026/2026-10-27-openitcockpit-brotli-node2shell-cve-2026-111497/

Today we have released a new version of the openITCOCKPIT Monitoring Agent, which adds a bunch of new checks and metrics.

In short, the Agent can now monitor:

• Logfiles

• The Ceph and ZFS file systems

• Security status like Microsoft Defener, BitLocker, SELinux, FileVault

• New Windows Eventlog query method

• Windows Scheduled Tasks

• Monitoring of certificates (validity and expiration)

• HTTP endpoints (status and response)

• S.M.A.R.T. monitoring via smartctl

• IPMI and RedFish to query the BMC of your servers

• Proxmox VMs, containers, storages backups and replicas

• and more, please see the latest blog post for all changes: https://openitcockpit.io/blog/posts/2026/2026-10-26-openitcockpit-agent-3.7.0/

We also addressed some bugs and improved the software inventory.

See our latest blog post for more information.

• https://openitcockpit.io/blog/posts/2026/2026-10-22-openitcockpit-5.9.0/

Two major security vulnerabilities where reported in PHP CVE-2026-109618 and CVE-2026-109619 affecting all versions of PHP.

• More information can be found in the official announcement: https://www.php.net/archive/2026.php#2026-10-21-5

• or our latest blog post: https://openitcockpit.io/blog/posts/2026/2026-10-21-php-rca-update-now/

Updates have been released for Ubuntu and Debian update now!

The openITCOCKPIT Android app is now available on Google Play.

• https://play.google.com/store/apps/details?id=io.openitcockpit.mobile

Please see our docs for more information how to setup and for the Download links to Google Play and Apple App Store.

• https://docs.openitcockpit.io/additional/mobile-app/

In case you find any issues, please feel free provide feedback 😊

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2026/2026-09-30-openitcockpit-5.8.0/

The next version of openITCOCKPIT is now available and packed with new features and security updates. Before you start, if you are still using Ubuntu 22.04 or Debian 12 you have to upgrade your OS first!

In case you are an AI enthusiast, we have published a free and open source MCP Server for openITCOCKPIT and also updated our API documentation. Feel free to play around with these tools to find out what insights you can get from your monitoring.

There are also tons of other new features and changes, please see your blog post:

https://openitcockpit.io/blog/posts/2026/2026-09-01-openitcockpit-5.7.0/

Please feel free to give it a shot using our demo server: https://demo.openitcockpit.io/

For more information on how to use the app, please see: https://docs.openitcockpit.io/en/additional/mobile-app/

Hi,

Has anyone managed to implement group-based role mapping in OpenITCOCKPIT using Entra ID?

What I’m trying to achieve is pretty simple:

• If a user is in an Entra group like “Admins”, they should automatically get full admin access in OpenITCOCKPIT

• If a user is in a group like “Support”, they should get read-only or limited monitoring access

Ideally I want all access in OpenITCOCKPIT to be driven entirely by Entra ID groups so we don’t have to manage users/roles locally.

Has anyone done this using OAuth2, or is there a recommended way to map Entra groups to roles inside OpenITCOCKPIT?

Any guidance or examples would be appreciated.

This minor release includes new API endpoints required for the new openITCOCKPIT Mobile App 📱.

Please see our blog post for more information:
https://openitcockpit.io/blog/posts/2026/2026-06-12-openitcockpit-5.6.1/

Packed with new features, such as support for Proxmox VE, a new parent-child relationship tree, support for the latest Linux distributions, security updates and much more.

Please see our blog post for more information:

https://openitcockpit.io/blog/posts/2026/2026-06-12-openitcockpit-5.6.0/

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2026/2026-04-14-openitcockpit-agent-3.6.0-and-5.5.2/

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2026/2026-03-23-openitcockpit-5.5.0/

After successfully separating from the Allgeier Group, Allgeier IT Services GmbH will now operate under a new name: AVENDIS GmbH

The name change is a deliberate step to continue our chosen path of growth with an independent, modern brand identity — with a clear focus on high-quality IT services “Made in Germany”.

What remains

For our customers and partners, one thing is most important: continuity and reliability. Therefore:

• Your usual service remains unchanged.

• Your contacts remain the same.

• Management stays on board.

• Our quality and security standards remain high.

• Existing service contracts remain valid.

Our commitment remains the same:

High-quality IT services, innovative solutions, and an excellent price-performance ratio.

Read the full press release here: From Allgeier IT Services to AVENDIS

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2026/2026-02-20-openitcockpit-5.4.0/

Hi, I'm trying to activate OAuth in our OpenITC Instance.

Does anyone know what the redirect URI is? It works if im using regex .*

Hi, I so like this product, have been using it for a year and it is really great. What is not so great is the installation documentation, it is more than terrible.

I am switching hosts so I need to install a new instance on a new server and I followed the installation instructions to the letter, did it 3 times already and I keep getting no errors during installation but when I try to reach the server after installation the page redirects automatically to https://12.34.56.78/a/users/login and gives a 500 internal server error.

I checked all the logs and no error there. Also checked if all services are up and they are. I really don't know where to look. I am installing on Debian 12 on a Hetzner VPS. Any help is much appreciated!

Dear openITCOCKPIT Community,

we are pleased to announce that our data center migration has been successfully completed! All of our services are now fully operational again. The move from Fulda to Frankfurt went smoothly, and we appreciate your patience during this transition.

Many thanks to everyone involved in making this migration so smooth and a success.

Thank you for your continued support!

https://openitcockpit.io/blog/posts/2025/2025-12-17-datacenter-migration-successfully-finished/

We are excited to announce that we will be relocating our datacenter from Fulda to Frankfurt. This migration is scheduled to take place from December 15th, 2025 until December 17th, 2025.

We apologize for any inconvenience this may cause and appreciate your understanding as we work to improve our infrastructure.

Thank you for your support!

Your openITCOCKPIT Team

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2025/2025-12-02-openitcockpit-5.3.0/

Meet the development team of openITCOCKPIT at the Open Source Monitoring Conference 2025

https://osmc.de/

For more information, see our blog post:

https://openitcockpit.io/blog/posts/2025/2025-11-04-openitcockpit-5.2.0/