MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bridge | fix host-table entry removal on CRS8xx devices (introduced in v7.25beta4); |
| bridge | warn about VLAN entries when vlan-filtering is disabled; |
| bth | add default client DNS and allowed IPs settings; |
| certificate | refactor certificate internal processes (additional changes); |
| console | fix export order of ordered lists such as firewall filter rules (introduced in v7.25beta3); |
| container | fix veth interface left running after restarting a stopped container; |
| l3hw | optimize ECMP nexthop offloading; |
| leds | fix missing LED triggers when an R11e card is installed; |
| lte | fix missing new firmware update notification on some modems; |
| lte | improve system stability when using Quectel EP06-E MBIM modem (additional fixes); |
| netinstall | add branding-and-custom-packages parameter for custom NPK packages; |
| poe-out | add port-type field to poe monitor and print output; |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fix PoE ports entering overload state when a PSU is fed from a UPS; |
| ptp | fix dropped packets on bridges with IGMP snooping and add vlan-id port setting; |
| sfp | improve QSFP-DD link establishing to NVIDIA DGX Spark and other devices (additional fixes); |
| ssh | add client host key verification; |
| ssh | warn users when weak RSA key is being used (additional fixes); |
| system | improve stability (includes CVE-2026-67280); |
| system | reboot automatically when the boot process fails to start; |
| system | show health settings and overtemp options based on device capabilities (additional fixes); |
| vlan | warn when a VLAN interface is created on a slave interface; |
| webfig | improve comboboxes to select the first matching option while typing; |
| wifi | fix per-link client statistics for MLO connections; |
| wifi-mediatek | fix 4.9 GHz band operation on the A42 (additional fixes); |
| winbox | fix wg-import creating an WireGuard interface without a config file; |
| wireguard | support comment lines in wg-import configuration files; |
| wireguard | treat empty private-key and preshared-key values as none; |
| Component | Change |
|---|---|
| system | improve stability (includes CVE-2026-67281); |
| Component | Change |
|---|---|
| bgp | improve stability; |
| bth | allow file sharing over direct LAN connections; |
| certificate | add "SSL.com Root Certification Authority ECC" to built-in root certificate authorities store; |
| certificate | allow importing a cross-signed certificate without replacing the existing one; |
| certificate | refactor certificate internal processes; |
| certificate | remove "GoDaddy Class 2 CA" from built-in root certificate authorities store; |
| console | improve stability; |
| crypto | improve stability (CVE-2026-67278); |
| ipsec | fix duplicate connections on IKEv2 retransmissions; |
| ipsec | improve stability; |
| lte | fix multi-APN data connections not working on R11l-LTE7 and R11e-LTE6 modems; |
| ospf | improve stability during recalculation; |
| ppp | improve stability; |
| ptp | add manual configuration of PTP message intervals and per-port enabling and disabling; |
| ptp | fix PTP offset instability under heavy background multicast traffic; |
| ptp | fix PTP timestamps showing the wrong time on CRS510; |
| sfp | improve QSFP-DD breakout link establishing to NVIDIA DGX Spark and other devices; |
| system | improve stability; |
| user | improve failed login delay logic (CVE-2026-16347); |
| webfig | improve stability; |
| wifi | update radio regulatory information; |
| www | improve stability; |
| Component | Change |
|---|---|
| bgp | improve stability; |
| certificate | add "SSL.com Root Certification Authority ECC" to built-in root certificate authorities store; |
| certificate | allow importing a cross-signed certificate without replacing the existing one; |
| certificate | refactor certificate internal processes; |
| certificate | remove "GoDaddy Class 2 CA" from built-in root certificate authorities store; |
| console | improve stability; |
| crypto | improve stability (CVE-2026-67278); |
| ipsec | fix duplicate connections on IKEv2 retransmissions; |
| ipsec | improve stability; |
| leds | fix LEDs set to interface status staying off when the interface is active; |
| ppp | improve stability; |
| ptp | add manual configuration of PTP message intervals and per-port enabling and disabling; |
| ptp | fix PTP offset instability under heavy background multicast traffic; |
| ptp | fix PTP timestamps showing the wrong time on CRS510; |
| sfp | improve QSFP-DD breakout link establishing to NVIDIA DGX Spark and other devices; |
| system | improve stability; |
| user | improve failed login delay logic (CVE-2026-16347); |
| wifi | update radio regulatory information; |
| www | improve stability; |
| Component | Change |
|---|---|
| app | allow the privileged mode to be enabled per service in the container app YAML; |
| bgp | improve stability; |
| bridge | improve FDB synchronization between MLAG peers when VLANs are added; |
| bth | fix file share issues when enabled through WinBox files menu; |
| certificate | refactor certificate internal processes (additional changes); |
| certificate | remove "GoDaddy Class 2 CA" from built-in root certificate authorities store; |
| console | improve stability; |
| crypto | improve stability (CVE-2026-67278); |
| dhcp | improve stability; |
| dhcpv4-client | ignore forcerenew packets that are not unicasted to client; |
| dns | fix resolving domain names that end with a dot; |
| iot | add a GPIO menu in WinBox; |
| ipsec | fix duplicate connections on IKEv2 retransmissions; |
| ipsec | fix IKEv1 tunnels failing to establish when the commit bit is set; |
| ipsec | improve stability; |
| ipv6 | fix a failure when releasing DHCPv6 prefix delegation pools; |
| l3hw | improve stability of L3 hardware offload when using IPv4-mapped IPv6 addresses; |
| leds | fix missing LED triggers when an R11e card is installed; |
| lte | do not force reconfiguration on roaming network when roaming is disabled; |
| lte | fix multi-APN connections not passing traffic on AT modems; |
| lte | fix multi-APN data connections not working on R11l-LTE7 and R11e-LTE6 modems; |
| lte | improve system stability when using Quectel EP06-E MBIM modem; |
| lte | improve system stability with eSIM-capable MBIM modems; |
| lte | use also the network reported ipv6 MTU on MBIM interfaces when "auto" mtu option used; |
| netinstall | fix adding and exporting server comments; |
| poe-out | fixed poe fault led behavior; |
| ppp | improve stability; |
| ptp | add manual configuration of PTP message intervals and per-port enabling and disabling; |
| ptp | fix PTP offset instability under heavy background multicast traffic; |
| ptp | fix PTP timestamps showing the wrong time on CRS510; |
| sfp | fix QSFP28 optical modules failing to establish a link on CCR2216 and CRS520; |
| sfp | improve QSFP-DD breakout link establishing to NVIDIA DGX Spark and other devices; |
| sniffer | show packet timestamps with nanosecond precision in WinBox; |
| ssh | add a connection id to SSH log entries; |
| ssh | warn users when weak RSA key is being used; |
| store | fix stored scripts and configuration entries larger than 16 KB (introduced in v7.25beta3); |
| system | improve device-mode flagged configuration detection; |
| system | improve stability; |
| system | show health settings and overtemp options based on device capabilities; |
| webfig | improve stability; |
| wifi | fix access point instability on A42 and E62 devices; |
| wifi | fix CAPsMAN failing when mangle marking is used with encrypted data channels; |
| wifi | fix traffic processing on CAPsMAN after an interface is disabled; |
| wifi | update radio regulatory information; |
| wifi-mediatek | fix 4.9 GHz band operation on the A42; |
| wifi-mediatek | fix the 5 GHz access point failing to start after reconfiguration on the A42; |
| wifi-qcom | improve IP multicast delivery to wireless clients; |
| winbox | fix the channel.reselect-interval range field in CAPsMAN; |
| winbox | fix the signal indication graphs for ppp-out interfaces; |
| www | improve stability; |