<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator><link href="https://genieacs.com/feed.xml" rel="self" type="application/atom+xml" /><link href="https://genieacs.com/" rel="alternate" type="text/html" /><updated>2026-03-29T14:24:42-07:00</updated><id>https://genieacs.com/feed.xml</id><title type="html">GenieACS</title><subtitle>A fast and lightweight TR-069 Auto Configuration Server (ACS)</subtitle><entry><title type="html">GenieACS 1.2.16 released</title><link href="https://genieacs.com/blog/2026/03/29/genieacs-1.2.16-released/" rel="alternate" type="text/html" title="GenieACS 1.2.16 released" /><published>2026-03-29T14:00:00-07:00</published><updated>2026-03-29T14:00:00-07:00</updated><id>https://genieacs.com/blog/2026/03/29/genieacs-1.2.16-released</id><content type="html" xml:base="https://genieacs.com/blog/2026/03/29/genieacs-1.2.16-released/"><![CDATA[<p>GenieACS v1.2.16 has been released. This release fixes a regression in v1.2.15
that broke the device search component in the UI.</p>

<p>Apologies for the inconvenience caused by regressions in both v1.2.14 and
v1.2.15, both of which were related to issues with the Mithril framework
upgrade. Mithril has now been pinned to v2.2.2 to avoid such issues in the
future.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[GenieACS v1.2.16 has been released. This release fixes a regression in v1.2.15 that broke the device search component in the UI.]]></summary></entry><entry><title type="html">GenieACS 1.2.15 released</title><link href="https://genieacs.com/blog/2026/03/26/genieacs-1.2.15-released/" rel="alternate" type="text/html" title="GenieACS 1.2.15 released" /><published>2026-03-26T18:00:00-07:00</published><updated>2026-03-26T18:00:00-07:00</updated><id>https://genieacs.com/blog/2026/03/26/genieacs-1.2.15-released</id><content type="html" xml:base="https://genieacs.com/blog/2026/03/26/genieacs-1.2.15-released/"><![CDATA[<p>GenieACS v1.2.15 has been released. This is an important security release
that addresses a critical vulnerability:</p>

<ul>
  <li><strong>Fix critical RCE vulnerability in /api/ping endpoint</strong> (follow-up to
CVE-2021-46704). Credit: JuHwiSang.</li>
</ul>

<p>Additionally, this release includes:</p>

<ul>
  <li>Fix regression in v1.2.14 where device IDs containing special characters
(e.g., %) were not handled correctly in the UI.</li>
</ul>

<p><strong>All users are strongly encouraged to upgrade immediately</strong> to patch the
security vulnerability.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[GenieACS v1.2.15 has been released. This is an important security release that addresses a critical vulnerability:]]></summary></entry><entry><title type="html">GenieACS 1.2.14 released</title><link href="https://genieacs.com/blog/2026/03/12/genieacs-1.2.14-released/" rel="alternate" type="text/html" title="GenieACS 1.2.14 released" /><published>2026-03-12T21:00:00-07:00</published><updated>2026-03-12T21:00:00-07:00</updated><id>https://genieacs.com/blog/2026/03/12/genieacs-1.2.14-released</id><content type="html" xml:base="https://genieacs.com/blog/2026/03/12/genieacs-1.2.14-released/"><![CDATA[<p>GenieACS v1.2.14 has been released. This is a minor maintenance release
addressing a couple of potential edge-case issues:</p>

<ul>
  <li>
    <p>Prevent UI crash when a malformed URL is sent to the server.</p>
  </li>
  <li>
    <p>Fix potential edge-case bugs in expression evaluation and session
serialization.</p>
  </li>
</ul>

<p>There is no pressing need to upgrade. These patches have been sitting in
the master branch for a while so I just wanted to get them out as we
wrap up work on the next major release. Stay tuned!</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[GenieACS v1.2.14 has been released. This is a minor maintenance release addressing a couple of potential edge-case issues:]]></summary></entry><entry><title type="html">GenieACS 1.2.13 released</title><link href="https://genieacs.com/blog/2024/06/06/genieacs-1.2.13-released/" rel="alternate" type="text/html" title="GenieACS 1.2.13 released" /><published>2024-06-06T13:00:00-07:00</published><updated>2024-06-06T13:00:00-07:00</updated><id>https://genieacs.com/blog/2024/06/06/genieacs-1.2.13-released</id><content type="html" xml:base="https://genieacs.com/blog/2024/06/06/genieacs-1.2.13-released/"><![CDATA[<p>I’m pleased to announce GenieACS v1.2.13, another maintenance release focused on
bug fixes. Here are the changes in this release:</p>

<ul>
  <li>
    <p>Increase connection timeout for UI and NBI from 30 to 120 seconds to avoid
timeouts when running unindexed queries in large deployments.</p>
  </li>
  <li>
    <p>Fix race condition causing 503 error when deleting multiple faults at once.</p>
  </li>
  <li>
    <p>Fix some UI config options not being evaluated as dynamic expressions.</p>
  </li>
  <li>
    <p>Fix an issue where certain edge-case query expressions were not being
correctly converted to MongoDB queries, resulting in inaccurate search
results.</p>
  </li>
</ul>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[I’m pleased to announce GenieACS v1.2.13, another maintenance release focused on bug fixes. Here are the changes in this release:]]></summary></entry><entry><title type="html">GenieACS 1.2.12 released</title><link href="https://genieacs.com/blog/2024/03/28/genieacs-1.2.12-released/" rel="alternate" type="text/html" title="GenieACS 1.2.12 released" /><published>2024-03-28T13:00:00-07:00</published><updated>2024-03-28T13:00:00-07:00</updated><id>https://genieacs.com/blog/2024/03/28/genieacs-1.2.12-released</id><content type="html" xml:base="https://genieacs.com/blog/2024/03/28/genieacs-1.2.12-released/"><![CDATA[<p>I am once again publishing a new release (v1.2.12) to address regressions
identified in the previous one:</p>

<ul>
  <li>
    <p>Fix broken XMPP support in the previous release.</p>
  </li>
  <li>
    <p>Fix regression causing CSV downloads to be buffered in memory before being
streamed to the client.</p>
  </li>
</ul>

<p>It is now clear that the v1.2.10 release required more thorough testing,
especially considering the significant amount of refactoring involved. It is
inexcusable that a broken XMPP feature made it into the release! Apologies to
those who upgraded only to be met with theses issues.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[I am once again publishing a new release (v1.2.12) to address regressions identified in the previous one:]]></summary></entry><entry><title type="html">GenieACS 1.2.11 released</title><link href="https://genieacs.com/blog/2024/03/21/genieacs-1.2.11-released/" rel="alternate" type="text/html" title="GenieACS 1.2.11 released" /><published>2024-03-21T12:00:00-07:00</published><updated>2024-03-21T12:00:00-07:00</updated><id>https://genieacs.com/blog/2024/03/21/genieacs-1.2.11-released</id><content type="html" xml:base="https://genieacs.com/blog/2024/03/21/genieacs-1.2.11-released/"><![CDATA[<p>GenieACS v1.2.11 has just been rolled out, addressing an issue in
<a href="/blog/2024/03/18/genieacs-1.2.10-released/">v1.2.10</a>
that broke compatibility with Node.js versions 12 through 15. That is the only
change in this release, so no rush to update from v1.2.10 if you’re on a more
recent version of Node.js.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[GenieACS v1.2.11 has just been rolled out, addressing an issue in v1.2.10 that broke compatibility with Node.js versions 12 through 15. That is the only change in this release, so no rush to update from v1.2.10 if you’re on a more recent version of Node.js.]]></summary></entry><entry><title type="html">GenieACS 1.2.10 released</title><link href="https://genieacs.com/blog/2024/03/18/genieacs-1.2.10-released/" rel="alternate" type="text/html" title="GenieACS 1.2.10 released" /><published>2024-03-18T20:00:00-07:00</published><updated>2024-03-18T20:00:00-07:00</updated><id>https://genieacs.com/blog/2024/03/18/genieacs-1.2.10-released</id><content type="html" xml:base="https://genieacs.com/blog/2024/03/18/genieacs-1.2.10-released/"><![CDATA[<p>At long last, GenieACS v1.2.10 has finally been released. This is a significant
release, and the changelog doesn’t do justice to the amount of work that has gone
into it. Much of the work has been on refactoring and improving the performance
and stability of various areas of the system, as well as improving CPE
interoperability. But here are the highlights from the changelog:</p>

<ul>
  <li>
    <p>Add support for XMPP connection requests. Use the environment variables
<code class="language-plaintext highlighter-rouge">XMPP_JID</code> and <code class="language-plaintext highlighter-rouge">XMPP_PASSWORD</code> to configure the XMPP connection for the ACS.</p>
  </li>
  <li>
    <p>The environment variables <code class="language-plaintext highlighter-rouge">CWMP_SSL_CERT</code> and <code class="language-plaintext highlighter-rouge">CWMP_SSL_KEY</code>, as well as their
counterparts for UI, NBI, and FS, now accept PEM-encoded certificates and keys
in addition to file paths.</p>
  </li>
  <li>
    <p>The UI no longer requires users to refresh the page after modifying presets,
provisions, or virtual parameters. Refreshing is now only necessary for
changes to users, permissions, or UI configurations.</p>
  </li>
  <li>
    <p>Improved conversion of GenieACS expressions into MongoDB queries for more
optimized queries and better index utilization.</p>
  </li>
  <li>
    <p>Refactor UI pagination and sorting to fix issues from the previous approach,
especially with sorting by rapidly changing parameters such as ‘last inform’
time.</p>
  </li>
</ul>

<p>Find the full list of changes in the changelog file or the
<a href="https://github.com/genieacs/genieacs/releases/tag/v1.2.10" target="\_blank">release page on GitHub</a>.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[At long last, GenieACS v1.2.10 has finally been released. This is a significant release, and the changelog doesn’t do justice to the amount of work that has gone into it. Much of the work has been on refactoring and improving the performance and stability of various areas of the system, as well as improving CPE interoperability. But here are the highlights from the changelog:]]></summary></entry><entry><title type="html">GenieACS 1.2.9 released</title><link href="https://genieacs.com/blog/2022/08/22/genieacs-1.2.9-released/" rel="alternate" type="text/html" title="GenieACS 1.2.9 released" /><published>2022-08-22T10:00:00-07:00</published><updated>2022-08-22T10:00:00-07:00</updated><id>https://genieacs.com/blog/2022/08/22/genieacs-1.2.9-released</id><content type="html" xml:base="https://genieacs.com/blog/2022/08/22/genieacs-1.2.9-released/"><![CDATA[<p>I’m pleased to announce GenieACS v1.2.9, a new maintenance release that
brings the usual assortment of bug fixes and stability improvements.
Here are the highlights:</p>

<ul>
  <li>
    <p>New config option <code class="language-plaintext highlighter-rouge">cwmp.skipRootGpn</code> to enable a workaround for some
problematic CPEs that reject GPN requests on data model root.</p>
  </li>
  <li>
    <p>Log HTTP/HTTPS client errors in debug log.</p>
  </li>
  <li>
    <p>Fix occasional lock expired errors after updating presets, etc.</p>
  </li>
  <li>
    <p>Fix bug where queries containing <code class="language-plaintext highlighter-rouge">&lt;&gt;</code> operator may return incorrect results.</p>
  </li>
  <li>
    <p>Fix a performance hit caused by DB calls containing the entire CPE data model
rather then just the updated parameters.</p>
  </li>
</ul>

<p>Find the full list of changes in the changelog file or the
<a href="https://github.com/genieacs/genieacs/releases/tag/v1.2.9" target="\_blank">release page on GitHub</a>.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[I’m pleased to announce GenieACS v1.2.9, a new maintenance release that brings the usual assortment of bug fixes and stability improvements. Here are the highlights:]]></summary></entry><entry><title type="html">GenieACS 1.2.8 released</title><link href="https://genieacs.com/blog/2021/10/27/genieacs-1.2.8-released/" rel="alternate" type="text/html" title="GenieACS 1.2.8 released" /><published>2021-10-27T13:00:00-07:00</published><updated>2021-10-27T13:00:00-07:00</updated><id>https://genieacs.com/blog/2021/10/27/genieacs-1.2.8-released</id><content type="html" xml:base="https://genieacs.com/blog/2021/10/27/genieacs-1.2.8-released/"><![CDATA[<p>GenieACS v1.2.8 has been released. This is primarily a security release
addressing a critical vulnerability in <code class="language-plaintext highlighter-rouge">genieacs-ui</code>. Credit goes to Alex
Hordijk for reporting the issue and helping with implementing the fix. If you’re
running any version in the 1.2.x series, it is imperative that you update as
soon as possible, especially if you have the UI exposed to the public Internet!</p>

<p>In addition to this security fix, this release includes a small number of
improvements and other fixes. Find the full list of notable changes in the
changelog file or the <a href="https://github.com/genieacs/genieacs/releases/tag/v1.2.8" target="\_blank">release page on GitHub</a>.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[GenieACS v1.2.8 has been released. This is primarily a security release addressing a critical vulnerability in genieacs-ui. Credit goes to Alex Hordijk for reporting the issue and helping with implementing the fix. If you’re running any version in the 1.2.x series, it is imperative that you update as soon as possible, especially if you have the UI exposed to the public Internet!]]></summary></entry><entry><title type="html">GenieACS 1.2.7 released</title><link href="https://genieacs.com/blog/2021/09/18/genieacs-1.2.7-released/" rel="alternate" type="text/html" title="GenieACS 1.2.7 released" /><published>2021-09-18T17:00:00-07:00</published><updated>2021-09-18T17:00:00-07:00</updated><id>https://genieacs.com/blog/2021/09/18/genieacs-1.2.7-released</id><content type="html" xml:base="https://genieacs.com/blog/2021/09/18/genieacs-1.2.7-released/"><![CDATA[<p>This is a quick update to address a couple of critical regression bugs in
v1.2.6. If you’ve already updated or in the process of updating your GenieACS
deployment to v1.2.6 (and only v1.2.6) then it’s strongly advised to update to
v1.2.7 immediately.</p>]]></content><author><name>Zaid Humaimidi</name></author><category term="blog" /><summary type="html"><![CDATA[This is a quick update to address a couple of critical regression bugs in v1.2.6. If you’ve already updated or in the process of updating your GenieACS deployment to v1.2.6 (and only v1.2.6) then it’s strongly advised to update to v1.2.7 immediately.]]></summary></entry></feed>