MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bgp | show interface names and VRF names in BGP logs; |
| bridge | fix MLAG bond slave interfaces not coming up when the MLAG configuration is removed (introduced in v7.25beta3); |
| bridge | fix MLAG peer ports going down when a bridge port is enabled (introduced in v7.25beta5); |
| bridge | fix virtual slave ports being removed from the bridge when MLO is triggered (introduced in v7.25beta4); |
| bth | add default client DNS and allowed IPs settings (additional fixes); |
| dhcpv6-server | fix send-reconfigure for DHCPv6 clients behind a relay; |
| ipv6 | fix missing IPv6 link-local addresses on some interfaces when the device is busy during boot; |
| lcd | improve stability when an SFP reports an unknown link speed; |
| switch | add packet and byte counters for ACL rules on Marvell Prestera switches (additional fixes); |
| switch | fix ACL rules remaining in the switch TCAM after removal (introduced in v7.25beta3); |
| system | improve stability; |
| vlan | add a forced-mac-address option for VLAN interfaces (additional fixes); |
| webfig | fix comboboxes in the System/PTP section not being editable (introduced in v7.25beta3); |
| webfig | fix empty Bridge and Interface/Ethernet sections (introduced in v7.25beta4); |
| Component | Change |
|---|---|
| bridge | add a per-VLAN DHCP snooping option; |
| bridge | fix loop-protect not working when a VLAN interface is added to the bridge; |
| bridge | show if bridge port is blocked by dot1x; |
| bridge | store hw option for disabled bridge ports; |
| cmr | add initial implementation of centralised platform for RouterOS devices, allowing updates, monitoring, alerts and other options; |
| console | improve stability; |
| container | add /app menu to ARM32 devices; |
| crypto | improve ECDSA and EdDSA key and signature validation; |
| dhcpv4-client | improve stability when the interface is deactivated while the client broadcasts a DHCP release; |
| dhcpv6-server | add a dns-none option to not include DNS options in responses; |
| dhcpv6-server | fix a DHCPv6 server failure when the RADIUS reply contains an empty delegated IPv6 prefix; |
| dns | improve service stability on HTTP/2 DoH connections; |
| ethernet | improve stability on devices with Intel I226-V network controllers; |
| ethernet | move the port bandwidth setting to the switch port menu; |
| files | improve stability when moving directories to external storage; |
| interface | show if interface is blocked by stp or dot1x; |
| ipsec | fix IPsec tunnels failing after migration from the old QKD settings; |
| ipsec | fix IPsec tunnels not establishing when an address my-id is configured on the responder; |
| l3hw | add VRRP hardware offloading support; |
| log | add the container name to CEF logs; |
| lte | do not reconfigure if not RouterOS activated CID is deactivated for R11l-LTE7 modem; |
| lte | fix dialer for D-Link DWM-222W modems; |
| lte | fix IPv6 route not being added on modems that do not report a gateway via control interface; |
| lte | fix modem firmware-upgrade failing when SMS polling is enabled; |
| lte | fix multi-APN passthrough stopping when one APN fails to connect; |
| lte | fix multi-APN passthrough stopping when one passthrough-interface VLAN is down on the CPE in multi passthrough interface setup; |
| lte | fix passthrough cleanup when the lte link goes down for QMI modems; |
| lte | fix recurring LTE disconnects R11e-LTE-US modem and some Sierra modems; |
| lte | keep the "auto" MTU option on LTE interface after reboot; |
| lte | reworked multi-apn support. Added support for slave APN interface add/remove; |
| netinstall | install the package version of the configured update channel; |
| ovpn | improve stability in UDP Ethernet mode when the TX queue is full; |
| pim | fix a routing process failure when the hello-delay is set to 0; |
| ptp | fix PTP not working on a VLAN-aware bridge when IGMP snooping is enabled; |
| qos | fix per-queue counters after a switch restart (introduced in v7.23); |
| quickset | fix the WAN interface being selected incorrectly; |
| reverse-proxy | fix setting the VRF parameter for reverse-proxy rules via CLI; |
| switch | add interface-list support to port isolation; |
| switch | fix high CPU usage when removing switch VLANs on Atheros-based switch chips; |
| switch | fix switch rules not working on Atheros-based switch chips; |
| switch | fix switch rules port matchers not working on IPv6 traffic on Atheros-based switch chips; |
| switch | fix switch rules with rate limits stopping traffic on CRS3xx devices; |
| switch | improve stability on CRS326-24S+2Q+ devices; |
| system | improve stability; |
| system | stop the flash configuration store from growing on dynamic configuration changes; |
| webfig | add conditional coloring of cells in tables; |
| wifi | add a default-country parameter in radio settings (CLI only); |
| wifi | fix WPA3 SAE authentication issue for ECC group 21 (introduced in 7.24.3); |
| wifi | implement channel.reselect-interval feature for missing drivers; |
| wifi | reuse freed station association IDs; |
| wifi-mediatek | update the wireless driver and firmware; |
| wifi-qcom | fix antenna gain setting not affecting transmit power (introduced in v7.24); |
| winbox | add the interface column to the OSPF neighbor list; |
| winbox | rename "minimum-version" to "minimum-firmware" under "System/RouterBOARD" menu; |
| winbox | show warning messages under "System/Users/SSH Keys" and "System/Users/SSH Private Keys" menu; |
| wireguard | do not show an interface as running when it has no peers; |
| wireguard | fix a client-dns value that could not be removed in WinBox; |
| wireguard | fix a peer that would not work after import when no endpoint address is set; |
| Component | Change |
|---|---|
| bridge | disable DHCP snooping ip binding table (introduced in v7.24); |
| bridge | enable vlan hardware offloading on hAP be3 Media device; |
| console | fix console output of /system/identity/print being split into multiple lines (introduced in v7.24.3); |
| console | fix scheduler scripts with the default start date and time not being triggered (introduced in v7.24); |
| ethernet | improve stability on hAP be3 Media device; |
| lte | improve stability for MBIM modem mode switch; |
| ospf | fix unset interface template parameters not being applied to interfaces; |
| poe-out | fix loss of PoE-out capability on CRS328-24P-4S+ after a reboot; |
| system | improve stability; |
| system | improve stability (includes CVE-2026-103903); |
| wifi | update radio regulatory information; |
| Component | Change |
|---|---|
| bridge | fix host-table entry removal on CRS8xx devices (introduced in v7.25beta4); |
| bridge | warn about VLAN entries when vlan-filtering is disabled; |
| bth | add default client DNS and allowed IPs settings; |
| certificate | refactor certificate internal processes (additional changes); |
| console | fix export order of ordered lists such as firewall filter rules (introduced in v7.25beta3); |
| container | fix veth interface left running after restarting a stopped container; |
| l3hw | optimize ECMP nexthop offloading; |
| leds | fix missing LED triggers when an R11e card is installed; |
| lte | fix missing new firmware update notification on some modems; |
| lte | improve system stability when using Quectel EP06-E MBIM modem (additional fixes); |
| netinstall | add branding-and-custom-packages parameter for custom NPK packages; |
| poe-out | add port-type field to poe monitor and print output; |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fix PoE ports entering overload state when a PSU is fed from a UPS; |
| ptp | fix dropped packets on bridges with IGMP snooping and add vlan-id port setting; |
| sfp | improve QSFP-DD link establishing to NVIDIA DGX Spark and other devices (additional fixes); |
| ssh | add client host key verification; |
| ssh | warn users when weak RSA key is being used (additional fixes); |
| system | improve stability (includes CVE-2026-67280); |
| system | reboot automatically when the boot process fails to start; |
| system | show health settings and overtemp options based on device capabilities (additional fixes); |
| vlan | warn when a VLAN interface is created on a slave interface; |
| webfig | improve comboboxes to select the first matching option while typing; |
| wifi | fix per-link client statistics for MLO connections; |
| wifi-mediatek | fix 4.9 GHz band operation on the A42 (additional fixes); |
| winbox | fix wg-import creating an WireGuard interface without a config file; |
| wireguard | support comment lines in wg-import configuration files; |
| wireguard | treat empty private-key and preshared-key values as none; |
| Component | Change |
|---|---|
| lte | prevent the modem firmware from being deleted for RBSXTLTE3-7, EC25-EU&KNe, EG25-G&KNe, EC25-EU&SXTsq, EG25-G&SXTsq (introduced in 7.23.6); If you have already upgraded to 7.23.6 or 7.24.3, follow these steps to restore LTE functionality on affected devices: 1. Upgrade RouterOS to version 7.23.7 or 7.24.4 2. Update the modem firmware: /interface/lte/firmware-upgrade [find] upgrade=yes 3. Reboot the router. For more details, see: https://forum.mikrotik.com/t/warning-lte-interface-stops-working-after-upgrade-to-7-23-6-7-24-3 |