NDMS updates — Dev Channel

Hardened access security to protect sensitive system files from non-admin users attempting traversal of the authenticated path. [NDM-4690]

Upgraded the curl utility to version 8.22.0, resolving the following security issues: CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, and CVE-2026-82209. [NDM-4677]

Upgraded the libxml2 library to version 2.15.4, resolving the following security issues: CVE-2026-86137, CVE-2026-86138, CVE-2026-86139, CVE-2026-86140, CVE-2026-86141, CVE-2026-86142, CVE-2026-86143, and CVE-2026-86144. [NDM-4676]

The following improvements have been applied to the Web Interface.

Fixed the service restart issue when using WPA Enterprise network protection under certain conditions. [NDM-4680]

Fixed automatic re-login after logout from device Web Interface accessed via RMM management platform. [NDM-4670] [Forum topic]

Upgraded the OpenSSL library to version 3.5.8, addressing the CVE-2026-75803 vulnerability. [NDM-4664]

Updated SSL/TLS cipher suite configuration and added ML-KEM support for post-quantum cryptography. [NDM-4663]

The following improvements have been applied to the Web Interface.

Fixed incorrect error counting on received wireless traffic in certain scenarios. [SYS-1879]

Enhanced the brute-force lockout policy command set. [NDM-4655]

Fixed NDMS version reporting to the RMM cloud device management system. [NDM-4633]

Fixed the operation of routing rules when using a local network gateway to reach remote subnets. [NDM-4583]

The following fixes have been applied to the Web Interface.

Restored support for multiple Wi-Fi networks to operate on the same frequency band within a network segment. [NDM-4632]

Upgraded the GnuTLS library to version 3.8.13, resolving the following security issues: CVE-2025-14831, CVE-2026-3832, CVE-2026-3833, CVE-2026-5260, CVE-2026-5419, CVE-2026-33845, CVE-2026-33846, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, and CVE-2026-42015. [NDM-4634]

The following fixes have been applied to the Web Interface.

Upgraded the libwebsockets library to version 4.5.8, mitigating the CVE-2025-11678, CVE-2025-11679, and CVE-2025-11680 vulnerabilities. [NDM-4622]

Fixed the wireless network reconnection failure that occurred on iOS and other client types after restarting the Wi-Fi System controller. [SYS-1844] [Forum topic]

The following fixes have been applied to the Web Interface.

The following improvements have been applied to the Web Interface.

Fixed the issue that prevented normal authentication in some cases when using the Netcraze mobile application. [NDM-4607] [Forum topic]

The following fixes have been applied to the Web Interface.

Resolved the issue that caused unable to get local issuer certificate error messages to appear, and affected the proper functioning of the Netcraze mobile app when connecting to certain devices. [SYS-1842] [Forum topic]

Fixed the display of client connection information in the Mesh Wi-Fi System. [NDM-4573]

Resolved an issue that caused devices to appear offline in the Netcraze mobile app. [SYS-1835]

Fixed an issue that prevented access to the Web Interface via a DDNS domain name. [NDM-4578]

Implemented the web-based command line system shell, accessible from the right slide-out menu after installing the Browser-based Command-Line Interface system component. [NWI-4900]

Upgraded the system authentication method for the HTTP suite to harden security. [NDM-4515]

Enabled post-quantum key exchange for the SSH protocol to comply with modern security standard. [NDM-4299]

Mitigated the CVE-2026-42533 vulnerability for HTTP protocol. [NDM-4566]

The following improvements have been applied to the Web Interface.

Enabled the inclusion of segments without an IP address on the controller node in the Wi-Fi System. [NDM-4443]

The following fixes have been applied to the Web Interface.

Fixed the Wi-Fi schedule operation on Wi-Fi System extenders. [NDM-4559]