RouterOS 7.26beta3

Architecture: x86
Channel: development
Build Time: 2026-10-16 11:44:30 UTC (1792151070)

RouterOS

Type	File
Main package	routeros-7.26beta3.npk
Extra packages	all_packages-x86-7.26beta3.zip
ISO Image	mikrotik-7.26beta3.iso
Install Image	install-image-7.26beta3.zip
Netinstall	netinstall-7.26beta3.zip

Cloud Hosted Router (CHR)

Platform	UEFI	Legacy BIOS
Raw disk image	chr-7.26beta3.img.zip	chr-7.26beta3-legacy-bios.img.zip
Open Virtual Appliance	chr-7.26beta3.ova.zip	chr-7.26beta3-legacy-bios.ova.zip
QEMU/KVM	chr-7.26beta3.qcow2.zip	chr-7.26beta3-legacy-bios.qcow2.zip
VirtualBox	chr-7.26beta3.vdi.zip	chr-7.26beta3-legacy-bios.vdi.zip
Hyper-V (legacy)	chr-7.26beta3.vhd.zip	chr-7.26beta3-legacy-bios.vhd.zip
Hyper-V	chr-7.26beta3.vhdx.zip	chr-7.26beta3-legacy-bios.vhdx.zip
VMware	chr-7.26beta3.vmdk.zip	chr-7.26beta3-legacy-bios.vmdk.zip

Changelog (click to expand)

What's new in 7.26beta3 (2026-10-16):

*) apptraffic - fix connection tracking not reverting to auto when apptraffic is disabled;
*) bridge - add dhcp-snooping-option82-policy setting for handling packets that already carry option 82;
*) bridge - add topology-change, host-moves and STP timer statistics to monitors;
*) bridge - fix fragmented IPv6 traffic being dropped by DHCPv6 snooping (introduced in v7.23);
*) bridge - fix static host entries being aged out of the hardware table;
*) bth - fix allow-uploads being settable on shares that point to a file;
*) cmr - add low-voltage-pd-detected poe status;
*) cmr - add user attribution to log entries;
*) cmr - allow using the WiFi SSID as an automatic label;
*) cmr - do not create alert conditions when rebooted=no or unpaired-device-connected=no;
*) cmr - fix channel width report for wifi stations;
*) cmr - fix device identity changes not syncing with the server;
*) cmr - fix failed upgrade alerts showing an incorrect version;
*) cmr - fix layout node coordinates displayed incorrectly when negative;
*) cmr - fix manual upgrade to a pinned version;
*) cmr - fix missing application counters in the apptraffic view;
*) cmr - fix missing device export command;
*) cmr - fix pairing password requirement changes not being detected;
*) cmr - fix pairing state after a failed password pairing;
*) cmr - fix setting port-labels for multiple ports from the CLI;
*) cmr - fix the first interface-change alert not firing;
*) cmr - fix upgrade "show-devices" listing non-paired devices;
*) cmr - fix wifi-logs showing entries from unselected devices;
*) console - fix /cmr configuration missing from the export;
*) console - improve stability;
*) container - add label support;
*) defconf - disable FTP and Telnet services;
*) defconf - fix boot device selection after configuration reset with keep-apps=yes;
*) discovery - do not send LLDP power requests before the default configuration is applied;
*) disk - fix all-zero NGUIDs on NVMe over TCP exported namespaces;
*) disk - fix newly formatted Btrfs disks failing to mount (introduced in v7.26beta1);
*) dot1x - fix MACsec not working between ARM and MIPS devices;
*) dude - replace dude 32-bit client with 64-bit version;
*) ethernet - fix broadcast traffic still reaching the CPU when port isolation is used on Atheros and MediaTek switches;
*) ethernet - fix occasional packet loss on hAP be Media;
*) ethernet - fix spurious duplicate MAC address warning on WDS interfaces;
*) evpn - fix MAC-IP route origination and withdrawal (introduced in v7.25);
*) iot - fix LoRa gateway packet validation when transmitting;
*) ipsec - fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21);
*) ipsec - fix policies not being loaded after an upgrade (introduced in v7.25);
*) l3hw - add VXLAN offloading to CRS8xx series switches;
*) l3hw - fix hardware offload for active-backup bonds;
*) l3hw - fix hardware offload for VLAN interfaces created directly on Ethernet ports on CRS8xx series switches;
*) l3hw - fix offload issues on ECMP routes with non-offloadable paths;
*) l3hw - fix packet loss when a directly connected host moves from a bond to Ethernet;
*) l3hw - gate L3 hardware offload by the port's L2 hardware offload state;
*) l3hw - stop forwarding packets through an unreachable nexthop;
*) lcd - improve stability when changing the color scheme after touchscreen recalibration;
*) leds - fix Audience front LED when wifi is managed by wifi-qcom-ac;
*) log - fix the default flag not being shown for the default configuration log rules;
*) lte - clear the cached eSIM profile list after a SIM change;
*) lte - fix dialer for D-Link DWM-222W modems (additional fixes);
*) lte - fix iOS tethering not obtaining an IP address;
*) lte - fix linkup only after link-recovery-timer after firmware-upgrade on RG650E-EU modem;
*) lte - fix packet loss with R11e-LTE-US modems (introduced in v7.21);
*) lte - fix QMI modems waiting out the full link-recovery-timer after re-attaching;
*) lte - fix Telit LE910C4-WWX modem not initializing after a cold boot;
*) lte - improve modem firmware-upgrade for EG800K-EU modem;
*) lte - improve stability for devices with QMI modems;
*) lte - keep the "auto" MTU option on LTE interface after reboot (additional fixes);
*) lte - prevent removing an APN profile that is still in use by inactive interfaces;
*) mpls - fix dynamic-label-range rejecting a valid 1024-label range;
*) netinstall - add force stop for in-progress installations;
*) netwatch - improve stability when deleting https-get probes;
*) poe-out - fix export not showing the configuration under the poe submenu;
*) poe-out - fix poe-in voltage monitoring and LLDP power requests on hEX S (2025) devices;
*) routing-filter - fix any-regexp community matcher matching an empty community attribute;
*) routing-filter - fix community delete, filter and modify with regexp-only community lists;
*) sfp - fix host link breaking on S+RJ10 modules when changing advertised modes;
*) sfp - improve link stability for QSFP28 breakout ports to prevent interface lane flapping when one lane goes offline;
*) sniffer - fix long-running captures failing after approximately 4.3 billion packets;
*) snmp - add ospfAdminStat and ospfRouterId to the OSPF MIB;
*) ssh - fix a failed command returning a successful exit status;
*) switch - fix egress rate limiting with jumbo frames on Marvell Prestera switches;
*) switch - fix link flapping on QSFP cage ports when connecting to NVIDIA DGX Spark;
*) switch - fix VLAN-tagged traffic being looped back in MLAG setups on CRS8xx series switches;
*) switch - improve SFP/QSFP auto-negotiation on CRS8xx series switches;
*) system - fix interface statistics for third-party monitoring tools;
*) system - improve stability;
*) tls - add Renegotiation Indication Extension support;
*) traffic-flow - add post-NAT IPv6 addresses to NetFlow records;
*) traffic-flow - fix CPU usage being classified as networking in the profiler;
*) webfig - add on-demand loading of directory contents in the Files menu;
*) webfig - fix static IPv6 addresses showing wrong lifetime values;
*) webfig - improve network topology view performance;
*) wifi - add station-bridge and station-pseudobridge mode support for MLO stations;
*) wifi - fix client isolation assigned via RADIUS being lost after roaming;
*) wifi - improve stability when disabling an AP with multiple connected stations;
*) wifi - initial MLO station mode support on 802.11be devices;
*) wifi - make station interfaces compatible with access points that do not retransmit EAPoL message 1;
*) wifi-mediatek - fix roaming between APs belonging to the same MLO group;
*) wifi-mediatek - improve stability when MLO stations connect;
*) wifi-mediatek - update radio regulatory information;
*) wifi-mediatek - update the wireless driver and firmware (additional fixes);
*) wifi-qcom-ac - fix traffic being sent to the wrong station after a station-bridge roams between APs;
*) winbox - add a comment field to the DNS adlist window;
*) winbox - add the default-country parameter to wifi radio settings;
*) winbox - add wpa3-psk-gd to wifi security profile authentication types;
*) winbox - add ZeroTier controller, member and peer hint settings;
*) winbox - allow adding LTE interfaces with a master interface and APN profile;
*) winbox - display the "forced-on-bt" PoE-out mode set from the CLI;
*) winbox - fix bridge filter window disabling valid fields for IPv6 rules;
*) winbox - fix wifi radio band selection not being available in radio settings;
*) winbox - hide ACL rule counter tools and graphs on non-Prestera switches;
*) winbox - rename last-member-interval to last-member-query-interval;
*) wireguard - ignore disabled peers when checking for duplicate Allowed Addresses;
*) www - fix REST API login for users with rest-api policy, but without api policy;