Release Notes - 2026-10-27

Last modified: October 27, 2026

2 minute read

Improvements & Updates

Security vulnerability in the Docusnap Server closed: This patch closes a critical security vulnerability in the Docusnap Server (CVE-2026-108172) and comprehensively secures the communication between the Docusnap Server and Discovery clients. All versions of Docusnap 15 prior to 15.0.528.26302 are affected, including SP1.
Identifying PHP installations (php2shell): For the critical PHP vulnerability php2shell (CVE-2026-109618, CVE-2026-109619), Docusnap helps identify and check existing PHP installations, including those without a software entry, as is common on Windows and macOS. New “PHP Overview” reports for Linux, Windows, and macOS list the installations found on each system with path and version. The required search definitions for the file search are included. For Windows, the file php_filesearch.xml for the recommended script-based inventory is additionally provided in the installation directory under Docusnap\Tools\filesearch. Discovery-Windows.exe and the XML file are copied to the target system and run there with administrator rights; the result is then imported via the script import:
```
Discovery-Windows.exe -S C:\Temp\php_filesearch.xml -O C:\Temp
```

General improvements: The Cisco Meraki, Hyper-V, and Group Policy inventories introduced with Docusnap 15 work more reliably in practice, and jobs carried over from Docusnap 14 remain fully usable after the update. Comparison reports and IT concepts work as usual again. Npcap and Nmap have been updated to versions 1.90 and 7.992. In addition, improvements have been made in the areas of Windows, Linux, SNMP, SQL Server, Veeam B&R, Docusnap Web, and Import. A complete list of all changes can be found in the Changelog.