KeeneticOS updates — Dev Channel

Implemented system backup creation and deployment. [NDM-4830]

Added a Back Up and Restore section on the Files tab in System Settings to manage encrypted backups of all device settings and the operating system. Backups can be used to restore your device to its previous state or to transfer your settings to another compatible device. [NWI-5129]

Security enhancements.

The following fixes have been applied to the Web Interface.

Fixed guest Wi-Fi network propagation over Wi-Fi System extenders after Controller restart. [NDM-4846]

Corrected DHCP RELEASE and RENEW message addressing to unicast over wireless networks. [SYS-1903]

Upgraded the ca-certificates package to blacklist unsafe root certificates, including emSign ECC Root CA - G3 and Comodo AAA Services root. [SYS-1918]

Improved the Web Interface authentication procedure for users without administrator privileges. [NDM-4782]

Refined the command restrictions for read-only users, preventing privilege escalation via program execution. [NDM-4773]

Refined SSH access validation to eliminate spurious SFTP access denial messages. [NDM-4790]

The following fixes have been applied to the Web Interface.

Added System Security page featuring a display of system events in the Security Log, brute-force protection settings for network services, and DoS attack mitigation controls. [NWI-5104]

Upgraded the OpenSSL library to version 3.5.9 to address multiple vulnerabilities, including CVE-2026-35189, CVE-2026-54872, CVE-2026-72897, CVE-2026-75806, CVE-2026-84782, and CVE-2026-84783. [NDM-4754]

Upgraded the nginx application to version 1.30.6 to address multiple vulnerabilities, including CVE-2026-15176, CVE-2026-93479, CVE-2026-97205, and CVE-2026-97629. [NDM-4769]

Disabled TCP port forwarding over SSH for non-admin users to prevent lateral movement attacks that aim to gain access to other network devices. [NDM-4738]

The following fixes have been applied to the Web Interface.

The following improvements have been applied to the Web Interface.

Refined the deletion procedure and improved backward compatibility when configuring Wi-Fi networks. [NDM-4711]

Improved compatibility with BroadLink wireless devices. [SYS-1900]

Upgraded the ca-certificates package to version 20260816, refreshing the Mozilla Root Certificate Authority bundle for improved certificate validation and enhanced security. [NDM-4705]

The following fixes have been applied to the Web Interface.

Fixed the Ethernet Port assignment setting for Wi-Fi System extender devices in certain scenarios. [NDM-4637]

Hardened access security to protect sensitive system files from non-admin users attempting traversal of the authenticated path. [NDM-4690]

Upgraded the curl utility to version 8.22.0, resolving the following security issues: CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, and CVE-2026-82209. [NDM-4677]

Upgraded the libxml2 library to version 2.15.4, resolving the following security issues: CVE-2026-86137, CVE-2026-86138, CVE-2026-86139, CVE-2026-86140, CVE-2026-86141, CVE-2026-86142, CVE-2026-86143, and CVE-2026-86144. [NDM-4676]

The following improvements have been applied to the Web Interface.

Fixed the service restart issue when using WPA Enterprise network protection under certain conditions. [NDM-4680]

Fixed automatic re-login after logout from device Web Interface accessed via RMM management platform. [NDM-4670]

Upgraded the OpenSSL library to version 3.5.8, addressing the CVE-2026-75803 vulnerability. [NDM-4664]

Updated SSL/TLS cipher suite configuration and added ML-KEM support for post-quantum cryptography. [NDM-4663]

The following improvements have been applied to the Web Interface.

Fixed incorrect error counting on received wireless traffic in certain scenarios. [SYS-1879]

Enhanced the brute-force lockout policy command set. [NDM-4655]

Fixed KeeneticOS version reporting to the RMM cloud device management system. [NDM-4633]

Fixed the operation of routing rules when using a local network gateway to reach remote subnets. [NDM-4583]

The following fixes have been applied to the Web Interface.

Restored support for multiple Wi-Fi networks to operate on the same frequency band within a network segment. [NDM-4632]

Upgraded the GnuTLS library to version 3.8.13, resolving the following security issues: CVE-2025-14831, CVE-2026-3832, CVE-2026-3833, CVE-2026-5260, CVE-2026-5419, CVE-2026-33845, CVE-2026-33846, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, and CVE-2026-42015. [NDM-4634]

The following fixes have been applied to the Web Interface.

Upgraded the libwebsockets library to version 4.5.8, mitigating the CVE-2025-11678, CVE-2025-11679, and CVE-2025-11680 vulnerabilities. [NDM-4622]

Fixed the wireless network reconnection failure that occurred on iOS and other client types after restarting the Wi-Fi System controller. [SYS-1844]

The following fixes have been applied to the Web Interface.

The following improvements have been applied to the Web Interface.

Fixed the issue that prevented normal authentication in some cases when using the Keenetic mobile application. [NDM-4607]

The following fixes have been applied to the Web Interface.

Resolved the issue that caused unable to get local issuer certificate error messages to appear, and affected the proper functioning of the Keenetic mobile app when connecting to certain devices. [SYS-1842]

Fixed the display of client connection information in the Mesh Wi-Fi System. [NDM-4573]

Resolved an issue that caused devices to appear offline in the Keenetic mobile app. [SYS-1835]

Fixed an issue that prevented access to the Web Interface via a DDNS domain name. [NDM-4578]

Implemented the web-based command line system shell, accessible from the right slide-out menu after installing the Browser-based Command-Line Interface system component. [NWI-4900]

Upgraded the system authentication method for the HTTP suite to harden security. [NDM-4515]

Enabled post-quantum key exchange for the SSH protocol to comply with modern security standard. [NDM-4299]

Mitigated the CVE-2026-42533 vulnerability for HTTP protocol. [NDM-4566]

The following improvements have been applied to the Web Interface.

Enabled the inclusion of segments without an IP address on the controller node in the Wi-Fi System. [NDM-4443]

The following fixes have been applied to the Web Interface.

Fixed the Wi-Fi schedule operation on Wi-Fi System extenders. [NDM-4559]