RouterOS 7.25beta5

Architecture: x86
Channel: development
Build Time: 2026-09-16 11:11:41 UTC (1789557101)

RouterOS

Type	File
Main package	routeros-7.25beta5.npk
Extra packages	all_packages-x86-7.25beta5.zip
ISO Image	mikrotik-7.25beta5.iso
Install Image	install-image-7.25beta5.zip
Netinstall	netinstall-7.25beta5.zip

Cloud Hosted Router (CHR)

Platform	UEFI	Legacy BIOS
Raw disk image	chr-7.25beta5.img.zip	chr-7.25beta5-legacy-bios.img.zip
Open Virtual Appliance	chr-7.25beta5.ova.zip	chr-7.25beta5-legacy-bios.ova.zip
QEMU/KVM	chr-7.25beta5.qcow2.zip	chr-7.25beta5-legacy-bios.qcow2.zip
VirtualBox	chr-7.25beta5.vdi.zip	chr-7.25beta5-legacy-bios.vdi.zip
Hyper-V (legacy)	chr-7.25beta5.vhd.zip	chr-7.25beta5-legacy-bios.vhd.zip
Hyper-V	chr-7.25beta5.vhdx.zip	chr-7.25beta5-legacy-bios.vhdx.zip
VMware	chr-7.25beta5.vmdk.zip	chr-7.25beta5-legacy-bios.vmdk.zip

Changelog (click to expand)

What's new in 7.25beta5 (2026-09-16):

*) bridge - fix host-table entry removal on CRS8xx devices (introduced in v7.25beta4);
*) bridge - warn about VLAN entries when vlan-filtering is disabled;
*) bth - add default client DNS and allowed IPs settings;
*) certificate - refactor certificate internal processes (additional changes);
*) console - fix export order of ordered lists such as firewall filter rules (introduced in v7.25beta3);
*) container - fix veth interface left running after restarting a stopped container;
*) l3hw - optimize ECMP nexthop offloading;
*) leds - fix missing LED triggers when an R11e card is installed;
*) lte - fix missing new firmware update notification on some modems;
*) lte - improve system stability when using Quectel EP06-E MBIM modem (additional fixes);
*) netinstall - add branding-and-custom-packages parameter for custom NPK packages;
*) poe-out - add port-type field to poe monitor and print output;
*) poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fix PoE ports entering overload state when a PSU is fed from a UPS;
*) ptp - fix dropped packets on bridges with IGMP snooping and add vlan-id port setting;
*) sfp - improve QSFP-DD link establishing to NVIDIA DGX Spark and other devices (additional fixes);
*) ssh - add client host key verification;
*) ssh - warn users when weak RSA key is being used (additional fixes);
*) system - improve stability (includes CVE-2026-67280);
*) system - reboot automatically when the boot process fails to start;
*) system - show health settings and overtemp options based on device capabilities (additional fixes);
*) vlan - warn when a VLAN interface is created on a slave interface;
*) webfig - improve comboboxes to select the first matching option while typing;
*) wifi - fix per-link client statistics for MLO connections;
*) wifi-mediatek - fix 4.9 GHz band operation on the A42 (additional fixes);
*) winbox - fix wg-import creating an WireGuard interface without a config file;
*) wireguard - support comment lines in wg-import configuration files;
*) wireguard - treat empty private-key and preshared-key values as none;