June 2026 Panel Update: Live Server Metrics, Faster Console, and 19 CVEs Patched
Twenty-one changes shipped today: real-time CPU and memory on every server card, console log history loading in under 100 ms, SAM admin mod support, GMA extraction, masked secrets, and more.
A large batch of panel improvements went out today. Here is what changed and why it matters.
Dashboard now shows live server resource usage
Server cards on the dashboard now show real-time CPU, memory, and disk while your server is running. You no longer need to open each server individually to check whether it is under load. Indicators turn amber above 70% and red above 85%, so overloaded servers are visible at a glance.
Console log history loads significantly faster
Opening the console page was taking around one second for log history to appear. The bottleneck was a server-side concurrency issue on the log fetch path. It now loads well under a second. We also fixed a second issue where the console fired duplicate requests on initial load. Both problems are resolved, so the first thing you see when you open the console is the actual log, not a spinner.
SAM admin mod support on the Admin Ranks page
The Admin Ranks page previously only handled ULX. Servers running SAM can now view and manage ranks from the same page. The panel detects your admin mod automatically and shows the right interface for whichever one you are running.
GMA file extraction in the file manager
Uploading a .gma file and extracting it through the file manager now works. Previously it failed silently with no error message. If you move addons around as packed GMA files, this no longer requires an external workaround.
Addon disable/enable toggle without uninstalling
Each addon in your installed list now has a disable toggle. You can exclude an addon from your server temporarily without removing it, then re-enable it later. Useful for isolating crashes or testing configurations without losing your addon list.
Addon Health Monitor scan persists across navigation
Starting an Addon Health Monitor scan and then navigating away no longer cancels the scan. The scan continues in the background and the results are there when you come back to the page.
FastDL URL now correct per server
The FastDL download URL shown on the Workshop page was previously hardcoded to a single address, regardless of which server you were viewing. It now generates the correct URL for the server you have open.
Tokens and secrets masked by default
API keys, tokens, passwords, and webhook URLs are now hidden behind a mask everywhere they appear in the panel. Click the eye icon to reveal, or the copy icon to copy the value to your clipboard without showing it on screen. This applies across API key pages, SFTP credentials, Discord webhook fields, and other places where credentials appear.
Disabling 2FA requires confirmation
Turning off two-factor authentication or unsubscribing from push notifications now shows a confirmation step that explains what you are giving up before making the change. Previously it took effect immediately.
Security vulnerabilities patched
The panel's HTTP client (axios) was upgraded from 1.13.x to 1.17.0, closing four published advisories covering prototype-pollution issues that could allow header injection, CSRF token leakage, response tampering, and credential theft via config merge. If you run your own hosting infrastructure, the relevant package is axios at version 1.17.0 or later.
Players and Health Monitor pages work on all game types
Opening the Players or Health Monitor page on a Minecraft or other non-GMod server was triggering errors. Both pages now check your game type and either show the appropriate content or a clear "not available for this game" notice.
Other fixes
- Onboarding tour: longer steps no longer clip off-screen, scroll into view automatically, and the tour no longer crashes if a target element is missing
- Email verification resend from the login page now works and shows clear status feedback
- Console page settings and overflow menus now close on Escape and report their open/closed state correctly to screen readers
- Console header bar removed: the server name, IP, and status it duplicated are already in the sidebar, so the console now has more room for actual log output
Help Centre
A Help Centre is now live at /help. It covers panel features, game setup guides for DarkRP and Minecraft, admin rank configuration for ULX and SAM, subuser management, and common troubleshooting questions. If you run into something that is not covered, use the contact page or Discord.
Still stuck after reading this?
Ask in our Discord - we help with hosting questions whether or not you host with us.