Search changelog entries
| Component | Change |
|---|---|
| bgp | improve stability; |
| certificate | add "SSL.com Root Certification Authority ECC" to built-in root certificate authorities store; |
| certificate | allow importing a cross-signed certificate without replacing the existing one; |
| certificate | refactor certificate internal processes; |
| certificate | remove "GoDaddy Class 2 CA" from built-in root certificate authorities store; |
| console | improve stability; |
| crypto | improve stability (CVE-2026-67278); |
| ipsec | fix duplicate connections on IKEv2 retransmissions; |
| ipsec | improve stability; |
| leds | fix LEDs set to interface status staying off when the interface is active; |
| ppp | improve stability; |
| ptp | add manual configuration of PTP message intervals and per-port enabling and disabling; |
| ptp | fix PTP offset instability under heavy background multicast traffic; |
| ptp | fix PTP timestamps showing the wrong time on CRS510; |
| sfp | improve QSFP-DD breakout link establishing to NVIDIA DGX Spark and other devices; |
| system | improve stability; |
| user | improve failed login delay logic (CVE-2026-16347); |
| wifi | update radio regulatory information; |
| www | improve stability; |
| Component | Change |
|---|---|
| app | allow the privileged mode to be enabled per service in the container app YAML; |
| bgp | improve stability; |
| bridge | improve FDB synchronization between MLAG peers when VLANs are added; |
| bth | fix file share issues when enabled through WinBox files menu; |
| certificate | refactor certificate internal processes (additional changes); |
| certificate | remove "GoDaddy Class 2 CA" from built-in root certificate authorities store; |
| console | improve stability; |
| crypto | improve stability (CVE-2026-67278); |
| dhcp | improve stability; |
| dhcpv4-client | ignore forcerenew packets that are not unicasted to client; |
| dns | fix resolving domain names that end with a dot; |
| iot | add a GPIO menu in WinBox; |
| ipsec | fix duplicate connections on IKEv2 retransmissions; |
| ipsec | fix IKEv1 tunnels failing to establish when the commit bit is set; |
| ipsec | improve stability; |
| ipv6 | fix a failure when releasing DHCPv6 prefix delegation pools; |
| l3hw | improve stability of L3 hardware offload when using IPv4-mapped IPv6 addresses; |
| leds | fix missing LED triggers when an R11e card is installed; |
| lte | do not force reconfiguration on roaming network when roaming is disabled; |
| lte | fix multi-APN connections not passing traffic on AT modems; |
| lte | fix multi-APN data connections not working on R11l-LTE7 and R11e-LTE6 modems; |
| lte | improve system stability when using Quectel EP06-E MBIM modem; |
| lte | improve system stability with eSIM-capable MBIM modems; |
| lte | use also the network reported ipv6 MTU on MBIM interfaces when "auto" mtu option used; |
| netinstall | fix adding and exporting server comments; |
| poe-out | fixed poe fault led behavior; |
| ppp | improve stability; |
| ptp | add manual configuration of PTP message intervals and per-port enabling and disabling; |
| ptp | fix PTP offset instability under heavy background multicast traffic; |
| ptp | fix PTP timestamps showing the wrong time on CRS510; |
| sfp | fix QSFP28 optical modules failing to establish a link on CCR2216 and CRS520; |
| sfp | improve QSFP-DD breakout link establishing to NVIDIA DGX Spark and other devices; |
| sniffer | show packet timestamps with nanosecond precision in WinBox; |
| ssh | add a connection id to SSH log entries; |
| ssh | warn users when weak RSA key is being used; |
| store | fix stored scripts and configuration entries larger than 16 KB (introduced in v7.25beta3); |
| system | improve device-mode flagged configuration detection; |
| system | improve stability; |
| system | show health settings and overtemp options based on device capabilities; |
| webfig | improve stability; |
| wifi | fix access point instability on A42 and E62 devices; |
| wifi | fix CAPsMAN failing when mangle marking is used with encrypted data channels; |
| wifi | fix traffic processing on CAPsMAN after an interface is disabled; |
| wifi | update radio regulatory information; |
| wifi-mediatek | fix 4.9 GHz band operation on the A42; |
| wifi-mediatek | fix the 5 GHz access point failing to start after reconfiguration on the A42; |
| wifi-qcom | improve IP multicast delivery to wireless clients; |
| winbox | fix the channel.reselect-interval range field in CAPsMAN; |
| winbox | fix the signal indication graphs for ppp-out interfaces; |
| www | improve stability; |
| Component | Change |
|---|---|
| bgp | fix BGP link-local nexthops unreachable over a VRF and a crash when disabling an unnumbered connection; |
| btest | improve stability; |
| certificate | fix changing the built-in trust store setting (introduced in 7.22.2); |
| console | fix a memory leak in background scripts; |
| console | improve stability; |
| container | improve container image extraction; |
| dhcp | improve stability of DHCP handling; |
| disk | improve stability of the SMB server; |
| ethernet | improve stability on hAP be3 Media; |
| fetch | improve stability of the TFTP client; |
| ipv6 | add a neighbor discovery ping; |
| leds | fix LEDs set to interface status staying off when the interface is active; |
| lte | fix the RG650E-EU modem not bringing link up after a firmware update; |
| ping | add parameter checks for arp ping; |
| poe-out | fixed missing PoE-Out interface on hEX PoE lite, RB260GSP, OmniTIK 5 PoE, PowerBox; |
| ssh | refactor SSH internal processes and improved system stability; |
| system | improve stability; |
| webfig | improve stability; |
| winbox | fix the "addresses" spelling in read-only fields; |
| www | improve stability; |
| Component | Change |
|---|---|
| bgp | fix BGP link-local nexthops unreachable over a VRF and a crash when disabling an unnumbered connection; |
| btest | improve stability; |
| certificate | fix changing the built-in trust store setting (introduced in 7.22.2); |
| console | improve stability; |
| dhcp | improve stability of DHCP handling; |
| disk | improve stability of the SMB server; |
| fetch | improve stability of the TFTP client; |
| ipsec | fixed expired SA handling to prevent "no such item" errors during listing; |
| ipsec | improve IKE handshake stability; |
| leds | improved interface stats activity for devices with Marvell Prestera switch chip; |
| lte | removed extra restart after firmware upgrade for EC200A-EU modem; |
| lte | fix the RG650E-EU modem not bringing link up after a firmware update; |
| ping | add parameter checks for arp ping; |
| snmp | properly validate password length when applying configuration; |
| ssh | refactor SSH internal processes and improved system stability; |
| system | improve handling of invalid SSL/TLS requests; |
| system | improve stability; |
| tunnel | fixed stability issue caused by a misconfigured routing loop under bridge (introduced in v7.22); |
| webfig | improve stability; |
| wifi | updated radio regulatory information; |
| winbox | fix the "addresses" spelling in read-only fields; |
| wireguard | fixed peer Tx/Rx counters; |
| wireguard | generate port number when specified as zero; |
| wireguard | reinitialize socket on VRF change; |
| www | improve stability; |