MikroTik RouterOS 7.24.6 → 7.25
1 release · 2 breaking changes · 2 security fixes · 0 advisories fixed
2security2breaking0deprecated36feature0fix
Breaking changes
- breaking lte - remove leftover APN slave interfaces when the master LTE interface is removed in 7.25
- breaking user - fix removal of inactive REST API sessions (introduced in 7.21) in 7.25
Security changes
- security system - improve stability (includes CVE-2026-31431, CVE-2026-67280) in 7.25
- security winbox - add a Security tab and reorganize bridge and port dialogs in 7.25
Every release in between
featureapp - add the networkRouterIP variable for container apps
featureapp - allow the privileged mode to be enabled per service in the container app YAML
featurebgp - add the always-compare-med setting
featurebridge - add dynamic ARP inspection
featurebridge - add IP source guard
featurebridge - add mlag-lacp-fallback and mlag-init-delay settings for MLAG
featurebridge - improve FDB synchronization between MLAG peers when VLANs are added
featurebth - add default client DNS and allowed IPs settings
featurebth - add resumable file uploads
featurecapsman - add hw-protection-threshold
featureconsole - allow the array access operator to accept arrays of indices or keys
featurecontainer - add a Ctrl-] escape sequence to exit a stuck container shell
featuredhcpv4-server - add ipv6-only-preferred parameter to respect option 108
featuredhcpv6-client - add option 39 with the client hostname
featuredhcpv6-server - add option 39 (FQDN) support and add-dns-entries option
featureethernet - add the arp-accept parameter for interfaces with MAC
featurefirewall - add NAT-related fields to CEF format logging
featureiot - add a GPIO menu in WinBox
featureiot - add Bluetooth output power control
featureiot - allow custom radio plan usage under regional lock
featureipsec - add XFRM interface support
featureleds - add dark-mode support for L41
featurelte - add band display support for Huawei ME909s modems
featurelte - add missing network error messages for MBIM modems
featurelte - add the sms-protocol=qmi option for sending and reading SMS
breakinglte - remove leftover APN slave interfaces when the master LTE interface is removed
featurenetinstall - add branding-and-custom-packages parameter for custom NPK packages
featurepim - add MLD support for PIM
featurepoe-out - add port-type field to poe monitor and print output
featureport - add an FTDI latency_timer option for low-latency serial applications
featureppp - add port interface info to PPP outbound channel defaults
featureptp - add support for fixed master and slave port roles
featureptp - add transparent clock mode
featuresnmp - add an OID and logging for blacklisted program access
featuresnmp - add CAPsMAN radio data to SNMP
featuresnmp - add dynamic SNMP engine ID assignment
featuresnmp - add interface table with mtu and l2mtu OIDs
securitysystem - improve stability (includes CVE-2026-31431, CVE-2026-67280)
breakinguser - fix removal of inactive REST API sessions (introduced in 7.21)
securitywinbox - add a Security tab and reorganize bridge and port dialogs
+248 more items in the release notes