7.24.5 [stable] is released!

Announcements
1

Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 7.24.5 (2026-09-29):

  • bridge - disable DHCP snooping ip binding table (introduced in v7.24);
  • bridge - enable vlan hardware offloading on hAP be3 Media device;
  • console - fix console output of /system/identity/print being split into multiple lines (introduced in v7.24.3);
  • console - fix scheduler scripts with the default start date and time not being triggered (introduced in v7.24);
  • ethernet - improve stability on hAP be3 Media device;
  • lte - improve stability for MBIM modem mode switch;
  • ospf - fix unset interface template parameters not being applied to interfaces;
  • poe-out - fix loss of PoE-out capability on CRS328-24P-4S+ after a reboot;
  • system - improve stability;
  • wifi - update radio regulatory information;

To upgrade, click Check For Updates under System/Packages menu and select the stable Channel in RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

  • Everything went smoothly
  • I encountered an issue after the update (please post about the device, configuration, and unexpected symptoms)
  • I encountered an issue, but solved it (please post the solution)
0 voters

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. The file must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

3

Why? are they going back in the future? this is needed for Dynamic Arp inspection isn't ?

4

no love for older IPQ based devices? :pleading_face:

5

In my point of view, while they don't consider to allow URPF per interface... We will keep on this "put on a coat, take off a coat".

6

Because it was causing unexpected packet drops, and v7.24 did not have DAI/IPSG, keeping the snooping IP binding table served no practical purpose at that point (apart from looking good).

The IP binding table is needed for DAI/IPSG, which is available in v7.25.

7

Hi! After update a login/password is changed((( and I can't login to LTE18 and 4 x CRS-112. Not from Winbox, not from browser. Nr1 from "Before an upgrade" is super actual )))

8

Anybody upgraded? I can't: IPv4: bad HTTP response.

9

I presume you are using direct system/package/update and are getting that response.
It means routeros cannot contact mikrotik download servers which often is the case immediately after new packages are uploaded.
Just try again later...

10

CVE numbers and/or description of the impact please!

11

The MikroTik hAP ax2 was successfully updated. I’ve completed all the checks, and everything is working perfectly.
To be honest, there’s never time really been any issue with the hAP ax2. I’d say it’s the best mini router of all time. Thanks.

12

RB5009 + wAP AX combo updated this morning from 7.24.3. No complaints here.

13

"Stability improvements" are not about addressing CVEs, IMHO although sometimes it does cover them.

I believe the "improved stability" primarily covers certain internal tweaks meant to reduce sector writes to flash storage. RouterOS caches disk writes in RAM before committing writes to flash storage.

So these types of tweaks are hiding under a category of "improved stability" fixes. This is my speculative assumption made after closely watching the changes.

14

E60iUGS and EC25-EU&KNe were successfully updated.

15

We cannot know unless they mention it or people research it completely. "improved stability" may just as well mean a DoS or worse vulnerability has been fixed.

The release notes should be put in the "manual" with more description and/or links to relevant documentation for each item. The one-line change notes format tempts the writer to keep it terse, lacking the required information to base decisions for update schedules.

16

There were recent occasions where "Stability improvements" and similar was used for security fixes, including CVEs. So there is that.

On topic: Updated my home network RB5009, no peculiarities so far.

17

Probably https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06

18

Of course I have seen that, but the CVE says that "RouterOS <7.24" is affected, so that would not warrant a release of 7.24.5, only of 7.23.7.

But maybe it wasn't really true what it said in the CVE, or MikroTik believe that the fix can be improved.

19

Another vote for this ^

IPQ-6010/IPQ-PPE please (hAP ax² , hAP ax³)?

20

Hi.

Has the issue with the skins that I previously reported to the support team been resolved in this version, or should I still wait for newer versions?

21

RB951Ui-2nD with version 7.24.4 had port-wan interruptions for milliseconds, not affecting ping or winbox login. I thought it might be a "cable" problem. But with such a recent version, I applied the upgrade for testing and .. :slight_smile:
Thanks MikroTik

RB1100Dx4 after four Red starts/restarts and shared supout, the problem is not noticeable :dizzy:

RB5009UG+S+ :heart_on_fire: ( 14 Routers ) Perfect!

RB2011UiAS-2HnD there is no blue in the log :motorcycle: :rocket: Perfect!

L009UiGS ( 17 Routers ) Perfect!

PS: Thanks MikroTik x 1 000 000 .. 000 000 /1 :heart: