MikroTik Changelogs

Search changelog entries

7.23.8 Long-term 2026-Oct-08 (3 weeks ago)
Component Change
console fix console output of /system/identity/print being split into multiple lines (introduced in v7.23.6);
ethernet improved stability when forcing unsupported link speed;
ipsec fix IPsec tunnels not establishing when an address my-id is configured on the responder;
ospf fix unset interface template parameters not being applied to interfaces;
quickset fix the WAN interface being selected incorrectly;
system improve stability (includes CVE-2026-84411);
system stop the flash configuration store from growing on dynamic configuration changes;
system improve stability (includes CVE-2026-84411, CVE-2026-103903);
wifi fix malformed management frame information elements advertising availability of multiple 6GHz APs;
wifi update radio regulatory information;
6.49.23 Stable 2026-Oct-07 (3 weeks ago)
Component Change
system improve stability (includes CVE-2026-84411);
7.25rc1 Testing 2026-Oct-01 (4 weeks ago)
Component Change
bgp show interface names and VRF names in BGP logs;
bridge fix MLAG bond slave interfaces not coming up when the MLAG configuration is removed (introduced in v7.25beta3);
bridge fix MLAG peer ports going down when a bridge port is enabled (introduced in v7.25beta5);
bridge fix virtual slave ports being removed from the bridge when MLO is triggered (introduced in v7.25beta4);
bth add default client DNS and allowed IPs settings (additional fixes);
dhcpv6-server fix send-reconfigure for DHCPv6 clients behind a relay;
ipv6 fix missing IPv6 link-local addresses on some interfaces when the device is busy during boot;
lcd improve stability when an SFP reports an unknown link speed;
switch add packet and byte counters for ACL rules on Marvell Prestera switches (additional fixes);
switch fix ACL rules remaining in the switch TCAM after removal (introduced in v7.25beta3);
system improve stability;
vlan add a forced-mac-address option for VLAN interfaces (additional fixes);
webfig fix comboboxes in the System/PTP section not being editable (introduced in v7.25beta3);
webfig fix empty Bridge and Interface/Ethernet sections (introduced in v7.25beta4);
7.26beta1 Development 2026-Oct-01 (4 weeks ago)
Component Change
bridge add a per-VLAN DHCP snooping option;
bridge fix loop-protect not working when a VLAN interface is added to the bridge;
bridge show if bridge port is blocked by dot1x;
bridge store hw option for disabled bridge ports;
cmr add initial implementation of centralised platform for RouterOS devices, allowing updates, monitoring, alerts and other options;
console improve stability;
container add /app menu to ARM32 devices;
crypto improve ECDSA and EdDSA key and signature validation;
dhcpv4-client improve stability when the interface is deactivated while the client broadcasts a DHCP release;
dhcpv6-server add a dns-none option to not include DNS options in responses;
dhcpv6-server fix a DHCPv6 server failure when the RADIUS reply contains an empty delegated IPv6 prefix;
dns improve service stability on HTTP/2 DoH connections;
ethernet improve stability on devices with Intel I226-V network controllers;
ethernet move the port bandwidth setting to the switch port menu;
files improve stability when moving directories to external storage;
interface show if interface is blocked by stp or dot1x;
ipsec fix IPsec tunnels failing after migration from the old QKD settings;
ipsec fix IPsec tunnels not establishing when an address my-id is configured on the responder;
l3hw add VRRP hardware offloading support;
log add the container name to CEF logs;
lte do not reconfigure if not RouterOS activated CID is deactivated for R11l-LTE7 modem;
lte fix dialer for D-Link DWM-222W modems;
lte fix IPv6 route not being added on modems that do not report a gateway via control interface;
lte fix modem firmware-upgrade failing when SMS polling is enabled;
lte fix multi-APN passthrough stopping when one APN fails to connect;
lte fix multi-APN passthrough stopping when one passthrough-interface VLAN is down on the CPE in multi passthrough interface setup;
lte fix passthrough cleanup when the lte link goes down for QMI modems;
lte fix recurring LTE disconnects R11e-LTE-US modem and some Sierra modems;
lte keep the "auto" MTU option on LTE interface after reboot;
lte reworked multi-apn support. Added support for slave APN interface add/remove;
netinstall install the package version of the configured update channel;
ovpn improve stability in UDP Ethernet mode when the TX queue is full;
pim fix a routing process failure when the hello-delay is set to 0;
ptp fix PTP not working on a VLAN-aware bridge when IGMP snooping is enabled;
qos fix per-queue counters after a switch restart (introduced in v7.23);
quickset fix the WAN interface being selected incorrectly;
reverse-proxy fix setting the VRF parameter for reverse-proxy rules via CLI;
switch add interface-list support to port isolation;
switch fix high CPU usage when removing switch VLANs on Atheros-based switch chips;
switch fix switch rules not working on Atheros-based switch chips;
switch fix switch rules port matchers not working on IPv6 traffic on Atheros-based switch chips;
switch fix switch rules with rate limits stopping traffic on CRS3xx devices;
switch improve stability on CRS326-24S+2Q+ devices;
system improve stability;
system stop the flash configuration store from growing on dynamic configuration changes;
webfig add conditional coloring of cells in tables;
wifi add a default-country parameter in radio settings (CLI only);
wifi fix WPA3 SAE authentication issue for ECC group 21 (introduced in 7.24.3);
wifi implement channel.reselect-interval feature for missing drivers;
wifi reuse freed station association IDs;
wifi-mediatek update the wireless driver and firmware;
wifi-qcom fix antenna gain setting not affecting transmit power (introduced in v7.24);
winbox add the interface column to the OSPF neighbor list;
winbox rename "minimum-version" to "minimum-firmware" under "System/RouterBOARD" menu;
winbox show warning messages under "System/Users/SSH Keys" and "System/Users/SSH Private Keys" menu;
wireguard do not show an interface as running when it has no peers;
wireguard fix a client-dns value that could not be removed in WinBox;
wireguard fix a peer that would not work after import when no endpoint address is set;
7.24.5 Stable 2026-Sep-29 (1 month ago)
Component Change
bridge disable DHCP snooping ip binding table (introduced in v7.24);
bridge enable vlan hardware offloading on hAP be3 Media device;
console fix console output of /system/identity/print being split into multiple lines (introduced in v7.24.3);
console fix scheduler scripts with the default start date and time not being triggered (introduced in v7.24);
ethernet improve stability on hAP be3 Media device;
lte improve stability for MBIM modem mode switch;
ospf fix unset interface template parameters not being applied to interfaces;
poe-out fix loss of PoE-out capability on CRS328-24P-4S+ after a reboot;
system improve stability;
system improve stability (includes CVE-2026-103903);
wifi update radio regulatory information;