Deprecated: Creation of dynamic property Smarty_Internal_Extension_Handler::$_updateScope is deprecated in
/var/www/html/lib/smarty-3.1.30/libs/sysplugins/smarty_internal_extension_handler.php on line
111
Software-update: RouterOS 7.25
MikroTik heeft versie 7.25 van RouterOS uitgebracht. RouterOS is een besturingssysteem dat zich richt op het uitvoeren van routertaken en meer. Denk daarbij aan het routeren van netwerkverkeer, maar ook aan een firewall, bandbreedtemanagement, het aansturen van accesspoints, een vpn-server en een hotspotgateway. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.
What's new in 7.25:app - add the networkRouterIP variable for container appsapp - allow the privileged mode to be enabled per service in the container app YAMLapp - fix CHR apps getting stuck on "starting" on slower boardsapp - show an error when an app variable cannot be resolvedapp - update the environment variables of the docker-with-komodo appbgp - add the always-compare-med settingbgp - fix BGP unnumbered connections within a VRFbgp - include the VNI number in outgoing EVPN routesbgp - log failed BGP connection attemptsbgp - show interface names and VRF names in BGP logsbridge - add dynamic ARP inspectionbridge - add IP source guardbridge - add mlag-lacp-fallback and mlag-init-delay settings for MLAGbridge - fix a false "already added as bridge port" errorbridge - fix an MLAG peer getting stuck in the disabled state after config changesbridge - fix bridge ports not forwardingbridge - fix fragmented IPv6 traffic being dropped by DHCPv6 snooping (introduced in v7.23)bridge - fix VRRP MAC behavior in MLAG setupsbridge - improve FDB synchronization between MLAG peers when VLANs are addedbridge - make MVRP work with MLAG dual bondsbridge - make the DHCP snooping log messages clearer and informativebridge - rename the IGMP last-member-interval property to last-member-query-intervalbridge - warn about VLAN entries when vlan-filtering is disabledbth - add default client DNS and allowed IPs settingsbth - add resumable file uploadsbth - check the available disk space before a file uploadbth - fix file share issues when enabled through WinBox files menubth - fix the file share getting stuck when disablingbth - return upload errors in JSON formatcapsman - add hw-protection-thresholdcapsman - fix the last-ip value being shown backwardscertificate - fix ACME certificate issuance for wildcard domainscertificate - refactor certificate internal processesconsole - allow the array access operator to accept arrays of indices or keysconsole - expose globals in the APIconsole - fix background ":execute as-string" jobs not terminating on interruptconsole - fix comment wrapping in the monitor commandconsole - fix inconsistent /ip/firewall/filter print with src-address-list and dst-address-listconsole - fix the where filter ignoring flags set to falseconsole - improve export orderconsole - improve stability when running scripts from Dudeconsole - prevent an out-of-memory condition when ":execute as-string" produces large outputconsole - prevent duplicate entries in /port/remote-accesscontainer - add a Ctrl-] escape sequence to exit a stuck container shellcontainer - fix container interface handling on CHRcontainer - fix veth interface left running after restarting a stopped containercontainer - require the container device-mode to enable swapcrypto - fix a possible crash during IPsec processing on Qualcomm devicesdefconf - fix button script policiesdefconf - fix default configuration generation when CRS8xx series switch ports initialize latedetnet - use a single random source portdhcpv4-client - ignore forcerenew packets that are not unicasted to clientdhcpv4-server - add ipv6-only-preferred parameter to respect option 108dhcpv4-server - show DHCP option 82 parameters in ASCII in addition to hexdhcpv6-client - add option 39 with the client hostnamedhcpv6-client - fix DHCPv6 client address handling after prefix-hint changesdhcpv6-client - remove a duplicate dhcp-options parameterdhcpv6-relay - use the packet's source MAC for option 79 if relay and client are on the same link layerdhcpv6-server - add option 39 (FQDN) support and add-dns-entries optiondhcpv6-server - fix send-reconfigure for DHCPv6 clients behind a relaydisk - fix all-zero NGUIDs on NVMe over TCP exported namespacesdisk - improve RAID5/6 throughputdns - fix resolving domain names that end with a dotdot1x - rename the reauth-timeout to reauth-perioddude - fix the server not starting at boot when data-directory is on a USB diskemail - fix server certificate verificationemail - show certificate related errors in the logethernet - add the arp-accept parameter for interfaces with MACethernet - fix a stability issue on RB1100AHx2 under heavy trafficethernet - fix bogus fast-path Rx traffic reported on an unconnected ether8 port on RB5009ethernet - fix link flap and unexpected reboots on RB5009ethernet - fix occasional packet loss on hAP be3 Mediaethernet - fix PPPoE link flapping on Intel X710ethernet - fix PPPoE over VLAN not working on Mellanox ConnectX-4ethernet - fix SFP compatibility on hAP ax S and hEX S (2025) devicesethernet - improve stability on x86 routers with Mellanox NICsevpn - publish MAC-IP routes (RT-2) for neighborsfetch - improve upload state reporting when using sftpfetch - never set a cookie jar for HTTP requestsfetch - show a clearer error when keep-result and output are both usedfirewall - add NAT-related fields to CEF format logginghardware - show the device name and location in /system/resource/hardware menuigmp-proxy - improve stability when changing /routing/igmp-proxy parametersiot - add a GPIO menu in WinBoxiot - add Bluetooth output power controliot - allow custom radio plan usage under regional lockiot - enforce the fixed antenna gain on boards with an embedded antennaiot - fix round-trip-time timing issues in LoRaWAN Basic Stationip-service - fix services becoming unreachable after their VRF is disabled and re-enabledipsec - add XFRM interface supportipsec - fix IKEv1 tunnels failing to establish when the commit bit is setipsec - fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21)ipsec - fix IPsec tunnels failing after migration from the old QKD settingsipsec - fix policy and SA handling after moving it to netlinkipv6 - fix a failure when releasing DHCPv6 prefix delegation poolsipv6 - fix cases when address is lost after reboot if prefix was taken from poolipv6 - fix missing IPv6 link-local addresses on some interfaces when the device is busy during bootipv6 - fix the DNS timer in router advertisementsipv6 - ignore router advertisements received on interfaces not in the accepting listl3hw - fix IPv6 link-local traffic being routed incorrectlyl3hw - improve stability of L3 hardware offload when using IPv4-mapped IPv6 addressesl3hw - optimize ECMP nexthop offloadinglcd - improve stability when an SFP reports an unknown link speedleds - add dark-mode support for L41leds - fix missing LED triggers when an R11e card is installedlte - accept both y and yes for eSIM confirmationlte - add band display support for Huawei ME909s modemslte - add missing network error messages for MBIM modemslte - add the sms-protocol=qmi option for sending and reading SMSlte - do not force reconfiguration on roaming network when roaming is disabledlte - fix LTE interfaces disappearing after FOTA updateslte - fix missing MAC address on QMI LTE interfaces after the interface is recreated (introduced in v7.24.4)lte - fix missing new firmware update notification on some modemslte - fix multi-APN connections not passing traffic on AT modemslte - fix the subscriber number not updating after switching SIM slotslte - improve system stability when using Quectel EP06-E MBIM modemlte - improve system stability with eSIM-capable MBIM modemslte - remove leftover APN slave interfaces when the master LTE interface is removedlte - use also the network reported ipv6 MTU on MBIM interfaces when "auto" mtu option usedlte - use RA for IPv6 acquisition for FG621netinstall - add branding-and-custom-packages parameter for custom NPK packagesnetinstall - fix a duplicate device entry on RB2011 with SFPnetinstall - fix adding and exporting server commentsnetinstall - fix multiple active interfaces inheriting the first interface's settingsnetinstall - fix Netinstall failing to reinstall RB850Gx2 devicesnetinstall - fix Netinstaller's memory check failing downloads to diskospf - fix DR/BDR traffic not being received with multiple instancesospf - improve stability when a neighbor is lostovpn - improve stability in UDP mode when the TX queue is fullpim - add MLD support for PIMpim - fix duplicate PIM configuration parameterspim - fix PIM-SM issues with IPv6pim - fix wrong or missing PIM configuration by separating PIM and GMP per interfacepoe-out - add port-type field to poe monitor and print outputpoe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces)poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces)poe-out - fix PoE fault led behaviorpoe-out - fix PoE ports entering overload state when a PSU is fed from a UPSpoe-out - remove the class limit for LLDP power requests on forced portsport - accumulate incoming data in log file even without TCP clients connectedport - add an FTDI latency_timer option for low-latency serial applicationsppp - add port interface info to PPP outbound channel defaultsppp - fix a packet leak during dial-on-demand connection of a ppp-out interfaceppp - fix BG77 modem port name and channel countppp - fix the offline firmware-update notification for BG77/BG770 modemsppp - fix the SINR value reported for BG77 and BG770 modemsptp - add support for fixed master and slave port rolesptp - add transparent clock modeptp - fix dropped packets on bridges with IGMP snooping and add vlan-id port settingqos - fix PFC and lossless buffer issues (introduced in v7.23)queue - fix a typo in the cake-overhead-scheme parameter valueroute - improve static route handling performancerouting-filter - fix any-regexp community matcher matching an empty community attributerouting-filter - fix community delete, filter and modify with regexp-only community listssfp - fix QSFP28 optical modules failing to establish a link on CCR2216 and CRS520sfp - improve QSFP-DD link establishing to NVIDIA DGX Spark and other devicessniffer - improve packet time resolutionsnmp - add an OID and logging for blacklisted program accesssnmp - add CAPsMAN radio data to SNMPsnmp - add dynamic SNMP engine ID assignmentsnmp - add interface table with mtu and l2mtu OIDssnmp - add IP pool OIDssnmp - add IPv6 address and interface name to the MNDP neighbour tablesnmp - add OID blacklistingsnmp - add OIDs for Netwatch probessnmp - add OSPF MIB tablessnmp - add ospfAdminStat and ospfRouterId to the OSPF MIBsnmp - add SHA-2 authentication for SNMPv3snmp - add transmit drop counterssnmp - add VRRP status OIDs for monitoringsnmp - fix the reported capability flags in LLDP-MIBsnmp - fix the snmp tools timing out when authentication is usedsnmp - log a warning when the src-address family does not match the requestsnmp - remove an interface OID that should not be accessiblessh - add a connection id to SSH log entriesssh - add host key verification for the SSH clientssh - limit server output to the client's window sizessh - show router host key fingerprintssh - switch the default host key type to Ed25519ssh - warn users when weak RSA key is being usedssl - enabled hardware accelerated GCM on Alpine CPUsssl - improve loggingswitch - add packet and byte counters for ACL rules on Marvell Prestera switchesswitch - fix degraded slow-path throughput on CRS304 switch (introduced in v7.22)switch - fix VLAN-tagged traffic being looped back in MLAG setups on CRS8xx series switchessystem - fix the frequency units from Mhz to MHzsystem - improve stability (includes CVE-2026-31431, CVE-2026-67280)system - reboot automatically when the boot process fails to startsystem - reduce the fan control interval on multi-core boardssystem - remove the channel label from the RouterOS versionsystem - show health settings and overtemp options based on device capabilitiessystem - warn about a missing wifi driver package on BE boardstftp - add VRF supporttraffic-flow - fix a kernel failure when disabling traffic flow on a busy systemuser - fix removal of inactive REST API sessions (introduced in 7.21)userman - improve stability when importing database filesvlan - add a forced-mac-address option for VLAN interfacesvlan - warn when a VLAN interface is created on a slave interfacewebfig - add a generic table and union group supportwebfig - add column resizing to embedded tableswebfig - hide the left menu only on QuickSet and Terminal pageswebfig - improve comboboxes to select the first matching option while typingwebfig - update stylewebfig - update the login page Help linkwifi - add a stream-port argument to configure the sniffer streaming server portwifi - add fast transition support for MLD deviceswifi - add interworking, aaa and steering settings to the network configurationwifi - add more steering debug logswifi - add network 'labels' parameter to WinBox and WebFigwifi - do not preserve branding package on cap when upgrading via capsmanwifi - fix CAPsMAN failing when mangle marking is used with encrypted data channelswifi - fix channel reselect interval/time operation for wifi-qcom-be and wifi-mediatek interfaceswifi - fix incorrect scan results for 320 MHz access pointswifi - fix MLD link type change and SA query in station modewifi - fix per-link client statistics for MLO connectionswifi - fix SAE authentication using a wrong cached PMKwifi - fix station statistics not updating after switching MLD linkswifi - fix the interworking network typewifi - fix the wrong band shown in the registration tablewifi - fix traffic processing on CAPsMAN after an interface is disabledwifi - perform a channel switch instead of dropping clients on radar detectionwifi - preserve dude package on cap when upgrading via capsmanwifi - report channel in log messageswifi - report management frame protection (MFP) usage in registration-tablewifi - reuse freed station association IDswifi - show the EAP user identity in the registration tablewifi - show the MLD links and SSID in MLO client log messageswifi-mediatek - fix 4.9 GHz band operation on the A42wifi-mediatek - fix roaming between APs belonging to the same MLO groupwifi-mediatek - fix the 5 GHz access point failing to start after reconfiguration on the A42wifi-mediatek - improve MLO client reconnectionwifi-qcom - fix disconnects during fast transition roamingwifi-qcom - fix station mode association failureswifi-qcom - improve IP multicast delivery to wireless clientswifi-qcom-ac - fix a regression in station MAC address handlingwifi-qcom-ac - reduce package sizewifi-qcom-be - add hw-protection-mode supportwifi-qcom-be - add the distance setting for 802.11be deviceswifi-qcom-be - fix the block ack request being declined after a channel switchwifi-qcom-be - fix Wi-Fi intermittently unavailable after rebootwifi-qcom-be - improve throughput in dense client environmentswinbox - add a filtered LLDP tab to neighbor discoverywinbox - add a Security tab and reorganize bridge and port dialogswinbox - add a wifi radio regulatory info (reg-info) viewwinbox - add device-mode configurationwinbox - add ISIS supportwinbox - add progress bar support to the GUIwinbox - add the client MTU option for WireGuard peerswinbox - add the container save optionwinbox - add wifi Spectral Scan supportwinbox - allow power-cycling multiple interfaces at oncewinbox - allow tuple fields with more than two values and multiple separatorswinbox - fix bridge filter window disabling valid fields for IPv6 ruleswinbox - fix SFP optical power values of 0.0 dBm not being shownwinbox - fix the channel.reselect-interval range field in CAPsMANwinbox - fix the EC/IO signal quality graphwinbox - fix the ISIS neighbor level type being empty for "l2"winbox - fix the Memory Limit field of fq_codel to use byteswinbox - fix the Min Prefix field in the routing rule dialogwinbox - fix the MPLS TE tunnel path hops fieldwinbox - fix the range field displayed in route filterswinbox - fix the signal indication graphs for ppp-out interfaceswinbox - fix the Skins menu for user groups opening a non-existent windowwinbox - fix the system note display on startupwinbox - fix the wifi Authentication Types and Encryption fieldswinbox - fix wg-import creating a WireGuard interface without a config filewinbox - improve status reporting under Tools/Email menuwinbox - make the Power Cycle button act only on the selected interfacewinbox - open the Format Drive panel only for supported diskswinbox - remove the redundant empty status field from the License windowwinbox - rename "send" to "transmit" in the Bandwidth Test windowwinbox - rework the switch QoS statistics tablewinbox - set minimal supported WinBox version to 4.3winbox - show warning messages under "System/Users/SSH Keys" and "System/Users/SSH Private Keys" menuwinbox - show WireGuard peer informationwireguard - add the client-mtu parameterwireguard - allow referencing a peer by its namewireguard - allow unsetting the client-listen-portwireguard - fix a peer that would not work after import when no endpoint address is setwireguard - improve error message reporting when adding a new peerwireguard - keep peer rx/tx counters when the peer is disabled and enabledwireguard - support comment lines in wg-import configuration fileswireguard - treat empty private-key and preshared-key values as nonewireguard - use the MTU value when importing a configurationwireguard - warn when an allowed-address overlaps another peerwww - add the remote client IP and domain to HTTPS log messageswww - fix a memory leak when parsing authentication headerswww - improve URI parsing
app - add the networkRouterIP variable for container appsapp - allow the privileged mode to be enabled per service in the container app YAMLapp - fix CHR apps getting stuck on "starting" on slower boardsapp - show an error when an app variable cannot be resolvedapp - update the environment variables of the docker-with-komodo appbgp - add the always-compare-med settingbgp - fix BGP unnumbered connections within a VRFbgp - include the VNI number in outgoing EVPN routesbgp - log failed BGP connection attemptsbgp - show interface names and VRF names in BGP logsbridge - add dynamic ARP inspectionbridge - add IP source guardbridge - add mlag-lacp-fallback and mlag-init-delay settings for MLAGbridge - fix a false "already added as bridge port" errorbridge - fix an MLAG peer getting stuck in the disabled state after config changesbridge - fix bridge ports not forwardingbridge - fix fragmented IPv6 traffic being dropped by DHCPv6 snooping (introduced in v7.23)bridge - fix VRRP MAC behavior in MLAG setupsbridge - improve FDB synchronization between MLAG peers when VLANs are addedbridge - make MVRP work with MLAG dual bondsbridge - make the DHCP snooping log messages clearer and informativebridge - rename the IGMP last-member-interval property to last-member-query-intervalbridge - warn about VLAN entries when vlan-filtering is disabledbth - add default client DNS and allowed IPs settingsbth - add resumable file uploadsbth - check the available disk space before a file uploadbth - fix file share issues when enabled through WinBox files menubth - fix the file share getting stuck when disablingbth - return upload errors in JSON formatcapsman - add hw-protection-thresholdcapsman - fix the last-ip value being shown backwardscertificate - fix ACME certificate issuance for wildcard domainscertificate - refactor certificate internal processesconsole - allow the array access operator to accept arrays of indices or keysconsole - expose globals in the APIconsole - fix background ":execute as-string" jobs not terminating on interruptconsole - fix comment wrapping in the monitor commandconsole - fix inconsistent /ip/firewall/filter print with src-address-list and dst-address-listconsole - fix the where filter ignoring flags set to falseconsole - improve export orderconsole - improve stability when running scripts from Dudeconsole - prevent an out-of-memory condition when ":execute as-string" produces large outputconsole - prevent duplicate entries in /port/remote-accesscontainer - add a Ctrl-] escape sequence to exit a stuck container shellcontainer - fix container interface handling on CHRcontainer - fix veth interface left running after restarting a stopped containercontainer - require the container device-mode to enable swapcrypto - fix a possible crash during IPsec processing on Qualcomm devicesdefconf - fix button script policiesdefconf - fix default configuration generation when CRS8xx series switch ports initialize latedetnet - use a single random source portdhcpv4-client - ignore forcerenew packets that are not unicasted to clientdhcpv4-server - add ipv6-only-preferred parameter to respect option 108dhcpv4-server - show DHCP option 82 parameters in ASCII in addition to hexdhcpv6-client - add option 39 with the client hostnamedhcpv6-client - fix DHCPv6 client address handling after prefix-hint changesdhcpv6-client - remove a duplicate dhcp-options parameterdhcpv6-relay - use the packet's source MAC for option 79 if relay and client are on the same link layerdhcpv6-server - add option 39 (FQDN) support and add-dns-entries optiondhcpv6-server - fix send-reconfigure for DHCPv6 clients behind a relaydisk - fix all-zero NGUIDs on NVMe over TCP exported namespacesdisk - improve RAID5/6 throughputdns - fix resolving domain names that end with a dotdot1x - rename the reauth-timeout to reauth-perioddude - fix the server not starting at boot when data-directory is on a USB diskemail - fix server certificate verificationemail - show certificate related errors in the logethernet - add the arp-accept parameter for interfaces with MACethernet - fix a stability issue on RB1100AHx2 under heavy trafficethernet - fix bogus fast-path Rx traffic reported on an unconnected ether8 port on RB5009ethernet - fix link flap and unexpected reboots on RB5009ethernet - fix occasional packet loss on hAP be3 Mediaethernet - fix PPPoE link flapping on Intel X710ethernet - fix PPPoE over VLAN not working on Mellanox ConnectX-4ethernet - fix SFP compatibility on hAP ax S and hEX S (2025) devicesethernet - improve stability on x86 routers with Mellanox NICsevpn - publish MAC-IP routes (RT-2) for neighborsfetch - improve upload state reporting when using sftpfetch - never set a cookie jar for HTTP requestsfetch - show a clearer error when keep-result and output are both usedfirewall - add NAT-related fields to CEF format logginghardware - show the device name and location in /system/resource/hardware menuigmp-proxy - improve stability when changing /routing/igmp-proxy parametersiot - add a GPIO menu in WinBoxiot - add Bluetooth output power controliot - allow custom radio plan usage under regional lockiot - enforce the fixed antenna gain on boards with an embedded antennaiot - fix round-trip-time timing issues in LoRaWAN Basic Stationip-service - fix services becoming unreachable after their VRF is disabled and re-enabledipsec - add XFRM interface supportipsec - fix IKEv1 tunnels failing to establish when the commit bit is setipsec - fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21)ipsec - fix IPsec tunnels failing after migration from the old QKD settingsipsec - fix policy and SA handling after moving it to netlinkipv6 - fix a failure when releasing DHCPv6 prefix delegation poolsipv6 - fix cases when address is lost after reboot if prefix was taken from poolipv6 - fix missing IPv6 link-local addresses on some interfaces when the device is busy during bootipv6 - fix the DNS timer in router advertisementsipv6 - ignore router advertisements received on interfaces not in the accepting listl3hw - fix IPv6 link-local traffic being routed incorrectlyl3hw - improve stability of L3 hardware offload when using IPv4-mapped IPv6 addressesl3hw - optimize ECMP nexthop offloadinglcd - improve stability when an SFP reports an unknown link speedleds - add dark-mode support for L41leds - fix missing LED triggers when an R11e card is installedlte - accept both y and yes for eSIM confirmationlte - add band display support for Huawei ME909s modemslte - add missing network error messages for MBIM modemslte - add the sms-protocol=qmi option for sending and reading SMSlte - do not force reconfiguration on roaming network when roaming is disabledlte - fix LTE interfaces disappearing after FOTA updateslte - fix missing MAC address on QMI LTE interfaces after the interface is recreated (introduced in v7.24.4)lte - fix missing new firmware update notification on some modemslte - fix multi-APN connections not passing traffic on AT modemslte - fix the subscriber number not updating after switching SIM slotslte - improve system stability when using Quectel EP06-E MBIM modemlte - improve system stability with eSIM-capable MBIM modemslte - remove leftover APN slave interfaces when the master LTE interface is removedlte - use also the network reported ipv6 MTU on MBIM interfaces when "auto" mtu option usedlte - use RA for IPv6 acquisition for FG621netinstall - add branding-and-custom-packages parameter for custom NPK packagesnetinstall - fix a duplicate device entry on RB2011 with SFPnetinstall - fix adding and exporting server commentsnetinstall - fix multiple active interfaces inheriting the first interface's settingsnetinstall - fix Netinstall failing to reinstall RB850Gx2 devicesnetinstall - fix Netinstaller's memory check failing downloads to diskospf - fix DR/BDR traffic not being received with multiple instancesospf - improve stability when a neighbor is lostovpn - improve stability in UDP mode when the TX queue is fullpim - add MLD support for PIMpim - fix duplicate PIM configuration parameterspim - fix PIM-SM issues with IPv6pim - fix wrong or missing PIM configuration by separating PIM and GMP per interfacepoe-out - add port-type field to poe monitor and print outputpoe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces)poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces)poe-out - fix PoE fault led behaviorpoe-out - fix PoE ports entering overload state when a PSU is fed from a UPSpoe-out - remove the class limit for LLDP power requests on forced portsport - accumulate incoming data in log file even without TCP clients connectedport - add an FTDI latency_timer option for low-latency serial applicationsppp - add port interface info to PPP outbound channel defaultsppp - fix a packet leak during dial-on-demand connection of a ppp-out interfaceppp - fix BG77 modem port name and channel countppp - fix the offline firmware-update notification for BG77/BG770 modemsppp - fix the SINR value reported for BG77 and BG770 modemsptp - add support for fixed master and slave port rolesptp - add transparent clock modeptp - fix dropped packets on bridges with IGMP snooping and add vlan-id port settingqos - fix PFC and lossless buffer issues (introduced in v7.23)queue - fix a typo in the cake-overhead-scheme parameter valueroute - improve static route handling performancerouting-filter - fix any-regexp community matcher matching an empty community attributerouting-filter - fix community delete, filter and modify with regexp-only community listssfp - fix QSFP28 optical modules failing to establish a link on CCR2216 and CRS520sfp - improve QSFP-DD link establishing to NVIDIA DGX Spark and other devicessniffer - improve packet time resolutionsnmp - add an OID and logging for blacklisted program accesssnmp - add CAPsMAN radio data to SNMPsnmp - add dynamic SNMP engine ID assignmentsnmp - add interface table with mtu and l2mtu OIDssnmp - add IP pool OIDssnmp - add IPv6 address and interface name to the MNDP neighbour tablesnmp - add OID blacklistingsnmp - add OIDs for Netwatch probessnmp - add OSPF MIB tablessnmp - add ospfAdminStat and ospfRouterId to the OSPF MIBsnmp - add SHA-2 authentication for SNMPv3snmp - add transmit drop counterssnmp - add VRRP status OIDs for monitoringsnmp - fix the reported capability flags in LLDP-MIBsnmp - fix the snmp tools timing out when authentication is usedsnmp - log a warning when the src-address family does not match the requestsnmp - remove an interface OID that should not be accessiblessh - add a connection id to SSH log entriesssh - add host key verification for the SSH clientssh - limit server output to the client's window sizessh - show router host key fingerprintssh - switch the default host key type to Ed25519ssh - warn users when weak RSA key is being usedssl - enabled hardware accelerated GCM on Alpine CPUsssl - improve loggingswitch - add packet and byte counters for ACL rules on Marvell Prestera switchesswitch - fix degraded slow-path throughput on CRS304 switch (introduced in v7.22)switch - fix VLAN-tagged traffic being looped back in MLAG setups on CRS8xx series switchessystem - fix the frequency units from Mhz to MHzsystem - improve stability (includes CVE-2026-31431, CVE-2026-67280)system - reboot automatically when the boot process fails to startsystem - reduce the fan control interval on multi-core boardssystem - remove the channel label from the RouterOS versionsystem - show health settings and overtemp options based on device capabilitiessystem - warn about a missing wifi driver package on BE boardstftp - add VRF supporttraffic-flow - fix a kernel failure when disabling traffic flow on a busy systemuser - fix removal of inactive REST API sessions (introduced in 7.21)userman - improve stability when importing database filesvlan - add a forced-mac-address option for VLAN interfacesvlan - warn when a VLAN interface is created on a slave interfacewebfig - add a generic table and union group supportwebfig - add column resizing to embedded tableswebfig - hide the left menu only on QuickSet and Terminal pageswebfig - improve comboboxes to select the first matching option while typingwebfig - update stylewebfig - update the login page Help linkwifi - add a stream-port argument to configure the sniffer streaming server portwifi - add fast transition support for MLD deviceswifi - add interworking, aaa and steering settings to the network configurationwifi - add more steering debug logswifi - add network 'labels' parameter to WinBox and WebFigwifi - do not preserve branding package on cap when upgrading via capsmanwifi - fix CAPsMAN failing when mangle marking is used with encrypted data channelswifi - fix channel reselect interval/time operation for wifi-qcom-be and wifi-mediatek interfaceswifi - fix incorrect scan results for 320 MHz access pointswifi - fix MLD link type change and SA query in station modewifi - fix per-link client statistics for MLO connectionswifi - fix SAE authentication using a wrong cached PMKwifi - fix station statistics not updating after switching MLD linkswifi - fix the interworking network typewifi - fix the wrong band shown in the registration tablewifi - fix traffic processing on CAPsMAN after an interface is disabledwifi - perform a channel switch instead of dropping clients on radar detectionwifi - preserve dude package on cap when upgrading via capsmanwifi - report channel in log messageswifi - report management frame protection (MFP) usage in registration-tablewifi - reuse freed station association IDswifi - show the EAP user identity in the registration tablewifi - show the MLD links and SSID in MLO client log messageswifi-mediatek - fix 4.9 GHz band operation on the A42wifi-mediatek - fix roaming between APs belonging to the same MLO groupwifi-mediatek - fix the 5 GHz access point failing to start after reconfiguration on the A42wifi-mediatek - improve MLO client reconnectionwifi-qcom - fix disconnects during fast transition roamingwifi-qcom - fix station mode association failureswifi-qcom - improve IP multicast delivery to wireless clientswifi-qcom-ac - fix a regression in station MAC address handlingwifi-qcom-ac - reduce package sizewifi-qcom-be - add hw-protection-mode supportwifi-qcom-be - add the distance setting for 802.11be deviceswifi-qcom-be - fix the block ack request being declined after a channel switchwifi-qcom-be - fix Wi-Fi intermittently unavailable after rebootwifi-qcom-be - improve throughput in dense client environmentswinbox - add a filtered LLDP tab to neighbor discoverywinbox - add a Security tab and reorganize bridge and port dialogswinbox - add a wifi radio regulatory info (reg-info) viewwinbox - add device-mode configurationwinbox - add ISIS supportwinbox - add progress bar support to the GUIwinbox - add the client MTU option for WireGuard peerswinbox - add the container save optionwinbox - add wifi Spectral Scan supportwinbox - allow power-cycling multiple interfaces at oncewinbox - allow tuple fields with more than two values and multiple separatorswinbox - fix bridge filter window disabling valid fields for IPv6 ruleswinbox - fix SFP optical power values of 0.0 dBm not being shownwinbox - fix the channel.reselect-interval range field in CAPsMANwinbox - fix the EC/IO signal quality graphwinbox - fix the ISIS neighbor level type being empty for "l2"winbox - fix the Memory Limit field of fq_codel to use byteswinbox - fix the Min Prefix field in the routing rule dialogwinbox - fix the MPLS TE tunnel path hops fieldwinbox - fix the range field displayed in route filterswinbox - fix the signal indication graphs for ppp-out interfaceswinbox - fix the Skins menu for user groups opening a non-existent windowwinbox - fix the system note display on startupwinbox - fix the wifi Authentication Types and Encryption fieldswinbox - fix wg-import creating a WireGuard interface without a config filewinbox - improve status reporting under Tools/Email menuwinbox - make the Power Cycle button act only on the selected interfacewinbox - open the Format Drive panel only for supported diskswinbox - remove the redundant empty status field from the License windowwinbox - rename "send" to "transmit" in the Bandwidth Test windowwinbox - rework the switch QoS statistics tablewinbox - set minimal supported WinBox version to 4.3winbox - show warning messages under "System/Users/SSH Keys" and "System/Users/SSH Private Keys" menuwinbox - show WireGuard peer informationwireguard - add the client-mtu parameterwireguard - allow referencing a peer by its namewireguard - allow unsetting the client-listen-portwireguard - fix a peer that would not work after import when no endpoint address is setwireguard - improve error message reporting when adding a new peerwireguard - keep peer rx/tx counters when the peer is disabled and enabledwireguard - support comment lines in wg-import configuration fileswireguard - treat empty private-key and preshared-key values as nonewireguard - use the MTU value when importing a configurationwireguard - warn when an allowed-address overlaps another peerwww - add the remote client IP and domain to HTTPS log messageswww - fix a memory leak when parsing authentication headerswww - improve URI parsing
Source:
Tweakers.net