26.2.147.125 - April 2026, LTS

New feature

Support for eSIM has been added for the following platforms.

• EX15 (using EG25-G)

• EX50 (using RM520N)

• IX10 (using EG25-G)

• IX20 (using EG25-G)

• IX25 4G, 5G, 5G RedCap

• IX30 (using LE910C4)

• IX40 5G

• TX40 5G

Traffic on the bootstrap profile is restricted to the following connections to allow for carrier profiles to be uploaded:

• Digi Remote Manager

  • edp12.devicecloud.com

  • proxy.devicecloud.com

  • test.idigi.com

  • tm1.idigi.com

  • dm1.devicecloud.com

  • dm2.devicecloud.com

• NTP

  • time.devicecloud.com

• Kigen

  • eim-production-0.kigen.com

eSIM information including profiles is now included in the Query State information. The information is pushed up to Digi Remote Manager on change rather than waiting for the next hour interval.

Support for eSIM profile failover when making a cellular connection has been added. The device will attempt make a connection using each profile on the eSIM until a successful cellular connection is established, with the bootstrap profile being the last to be used.

Enhancements

1. The Web UI has been updated

   • to have a similar design to Digi Remote Manager.

   • to reduce the time taken to load pages.

   • to use the new Digi Documentation portal https://docsportal.digi.com/cellular/Home.htm.

   • to improve the speed of the Terminal in the local web UI.

2. The Digi Remote Manager support has been updated to show when it is connected via a VPN tunnel.

   Previously it would say “Unknown” for the connection type.

3. Digi Remote Manager support has been updated so that the device will notify Digi Remote Manager when the configuration is changed. This will allow Digi Remote Manager to immediately perform Template conformance checks and any necessary remediations.

4. Several improvements have been made to help reduce the CPU utilization of devices.

5. The SSH support has been updated so that only SSH key authentication can be used in Primary Responder mode. Users that use SSH passwords with Primary Responder SHOULD update their configuration to use SSH keys before updating to this firmware version.

6. The Factory Erase support has been updated with the following:

   • A new configuration to perform a complete factory erase with a single button push.

   • Non-system files in the /opt directory will be erased.

   • Remove the APNs configured in the cellular module.

7. A network performance monitoring feature has been added that will periodically test the network. It will send out a number of ping packets and collect minimum, maximum and average latency, jitter, and packet loss. It can also do an hourly SpeedTest over the interface to collect upload and download rates. The results are uploaded to Digi Remote Manager as part of the Query State data.

8. The SNMP support has been updated to support the following authentication and encryption algorithms.

   • SHA2 (SHA-256, SHA-384, SHA-512)

   • AES192, AES256

9. A new Digi Remote Manager command has been added to allow Digi Remote Manager to trigger a SIM switch.

10. The following changes have been made to the built-in APN lists to improve connection times.

    • Moved vzwinternet to the top of the Verizon APN built-in list.

    • Moved broadband and nrbroadband to the top of the AT&T built-in APN list.

    • A Digi curated list built-in APN list has been added.

11. The ability to configure a carrier or PLMN for a configured APN has been added.

12. The Container support has been updated to support for custom configurations and flexible directory mounting.

13. The Digi Remote Manager Configuration Rollback support has been updated to display an error message if the device is already processing a configuration change and is waiting for the rollback time period to expire.

14. The WAN Bonding support has been updated so that Bondix UI config changes persist across reboots.

15. The Digi Remote Manager support has been updated to improve the time taken to update firmware and to download files to the device.

16. The Wi-Fi WPA3 Enterprise support has been updated with a new WPA3-192 security option to support better compatibility.

    • The original WPA3 Enterprise security setting has been updated to use 128-bit WPA3.

    • The new WPA3-192 Enterprise security setting uses 192-bit WPA3.

      Note Users currently using WPA3 Enterprise setting will be migrated to the new WPA3-192 setting.

17. A REST API has been added to allow the query state information to be retrieved directly from the device.

18. A new configuration option to configuration which interface to use for Digi Remote Manager connections has been added.

    The new configuration is cloud > drm > drm_interface <interface>.

19. The IPsec support has been updated as follows:

20. The IPsec peer configuration has moved

    • from vpn > ipsec > tunnels > name > remote > hostnames

    • to vpn > ipsec > tunnels > name > remote > peers

    • The peer selection configuration parameter has changed

      • from vpn > ipsec > tunnels > name > remote > hostname_selection

      • to vpn > ipsec > tunnels > name > remote > peer_selection

    • A new weighted round-robin algorithm has been added to allow certain peers to be more likely used.

    • An individual peer ID can now be configured for each peer if required.

    • The IPsec certificate and key settings have been made private so that it is not possible to read the values once they have been entered.

    • To allow a label to configured for the IPsec tunnel.

21. The SNMP trap support has been updated to allow the hostname to be used when sending a trap. The default is to the MAC address.

22. The following new T-Mobile IOT APNs have been added to the APN list:

    • iot.cc

    • static.iot

    • static.iot.t-mobile.com

23. The Docomo and KDDI carriers and default APNs have been added to the APN list.

24. The firmware update process, when used via the CLI or Web UI, has been updated to check for a minimum firmware version to help users to update to required intermediate firmware version first.

25. Added support for auto-enabling Primary Responder (PR) mode when a FirstNet SIM is detected.

26. Added support for multi-chunk data service transactions when communicating with Digi Remote Manager.

Security fixes

Package updates will include all security updates for the stated release, unless stated otherwise.

1. The Linux kernel has been updated to 6.18.0. (DAL-12427)

2. The OpenSSL package has been updated to v3.6.1

   • CVE-2025-11187 CVSS Score: 6.1 Medium

   • CVE-2025-15467 CVSS Score: 8.8 High

   • CVE-2025-15468 CVSS Score: 5.9 Medium

   • CVE-2025-15469 CVSS Score: 5.5 Medium

   • CVE-2025-66199 CVSS Score: 5.9 Medium

   • CVE-2025-68160 CVSS Score: 4.7 Medium

   • CVE-2025-69418 CVSS Score: 4.0 Medium

   • CVE-2025-69419 CVSS Score: 7.4 High

   • CVE-2025-69420 CVSS Score: 7.5 High

   • CVE-2025-69421 CVSS Score: 7.5 High

   • CVE-2026-2673 CVSS Score: 7.5 High

   • CVE-2026-22795 CVSS Score: 5.5 Medium

   • CVE-2026-22796 CVSS Score: 5.3 Medium

3. The gpsd package has been updated to 3.27.5. (DAL-12944)

   • CVE-2025-67268 CVSS Score: 9.8 Critical

   • CVE-2025-67269 CVSS Score: 7.5 High

4. The Mosquitto package has been updated to 2.0.22. (DAL-12779)

5. The xz package has been updated to 8.5.2. (DAL-12615)

   • CVE-2020-22916 CVSS Score: 5.5 Medium

   • CVE-2024-47611 CVSS Score: 6.3 Medium

6. The expat library has been updated to v2.7.3 (DAL-12434)

   • CVE-2025-59375 CVSS Score: 7.5 High

7. The jerryscript package has been updated to 3.0.0 (DAL-12398)

8. The glib library has been updated to v2.86.0. (DAL-11997)

   • CVE-2025-6052 CVSS Score: 7.5 High

   • CVE-2025-7039 CVSS Score: 3.7 Low

9. The procps package has been updated to v4.0.5. (DAL-11961)

   • CVE-2018-1121 CVSS Score: 5.9 Medium

   • CVE-2023-4016 CVSS Score: 3.3 Low

10. The Linux PAM library has been updated to v1.7.1. (DAL-11972)

    • CVE-2020-27780 CVSS Score: 9.8 Critical

    • CVE-2022-28321 CVSS Score: 9.8 Critical

    • CVE-2024-22365 CVSS Score: 5.5 Medium

    • CVE-2025-6020 CVSS Score: 7.8 High

11. The sqlite package has been updated to v3.50.4. (DAL-11945)

    • CVE-2025-6965 CVSS Score: 9.8 Critical

12. The libcurl package has been updated to version 8.19.0. (DAL-13136)

    • CVE-2026-3805 CVSS Score: 7.5 High

Bug fixes

1. An issue where the Python live image would not work with a new DAL image and then preventing Digi Remote Manager from updating the live image has been resolved. (DAL-12885)

2. An issue where the device would not reconnect to Digi Remote Manager after switching between IPsec tunnels for over 30 minutes has been resolved. (DAL-12858)

3. The following issues with IPsec have been resolved:

   • A missing firewall rule was causing packets to be dropped. (DAL-11998, DAL-12113)

   • The internal Linux interface name was reported instead of the DAL interface name in the Query State information. (DAL-12046)

   • Using Default route as the local endpoint and not acting as the initiator would prevent the IPsec tunnel from coming up. (DAL-11361)

4. An issue where the RIP and RIPng routing protocols were not working has been resolved. (DAL-12747)

5. There have been various fixes to the Query State support. (DAL-12622, DAL-12412, DAL-12746, DAL-12633, DAL-11893)

6. An issue where Python could experience an exception when using the runt module has been resolved. (DAL-12720)

7. The following RealPort issues have been resolved.

   • The data message could be truncated. (DAL-12702)

   • The wrong baud rate being displayed by the show serial command. (DAL-11783)

8. An issue with the SNMP where the location and contact information was incorrectly reported in SNMP get and getnext messages has been resolved. (DAL-12688)

9. An issue with VRRP where packets were being dropped by the firewall has been resolved. (DAL-12649)

10. A race condition during a SIM switch from AT&T to Verizon which was causing an incorrect APN to be assigned which resulted in a connection failure has been resolved. (DAL-121587)

11. An issue where the cellular signal RSRP was not being reported for the EM9191 modem has been resolved. (DAL-12567)

12. An issue with IX30 not connecting to the cellular network when using an APN username and password has been resolved. (DAL-12458)

13. An issue where the DAL firmware records two authentication attempts for a failed attempt using the Web UI. (DAL-12438)

14. An issue with Intelliflow could suffer a crash has been resolved. (DAL-12426)

15. An issue where a container file system getting corrupted has been resolved. (DAL-12395)

16. An issue where cellular related information was not being sent to syslog servers has been resolved. (DAL-12209)

17. An issue with WAN Bonding where the server IP address was not being correctly displayed in the show wan-bonding verbose command has been resolved. (DAL12173)

18. An issue with Wireguard when using the Windows 10 Wireguard client which would connect but experienced routing issues has been resolved. (DAL-12083)

19. An issue with the gaps in the SureLink RTT value being reported in the Query State information has been resolved. (DAL-12451)

20. An issue with configured scripts not starting at boot-up has been resolved. (DAL-11743)

21. An issue with TACACS+ accepting unauthenticated replies has been resolved. (DAL-12391)

22. An issue with Telit FN990A28 cellular 5G modem occasionally not getting an IPv4 address when using a 5G multi-slice SIM has been resolved. (DAL-12258)

23. The following issues with WAN Bonding have been resolved:

    • The WAN Bonding status not being reported in the Query State information. (DAL-12298)

    • The WAN Bonding server IP address being incorrectly displayed in show wan-bonding command. (DAL-12173)

    • The interface used to connect to Digi Remote Manager when using WAN Bonding was being incorrectly displayed. (DAL-10738)

24. An issue where Digi Remote Manager cannot access files via symbolic links to files in directories that Digi Remote Manager cannot access has been resolved. (DAL-12292)

25. An issue where ModemManager can be unintentionally disabled when a modem is being updated has been resolved. (DAL-12285)

26. An issue where a serial port Rx displays 0 if no signals are active has been resolved. (DAL-12281)

27. An issue with cellular related events not being sent to remote syslog servers has been resolved. (DAL-12209)

28. A memory leak experienced when accessing the Runt table in the Accelerated MIB has been resolved. (DAL-12176)

29. An issue where the cellular module would not initialize if the modem match setting was set to “any” has been resolved. (DAL-11942)

30. An issue with Python scripts using the threading module where a NoneType exception was being unexpectedly thrown has been resolved. (DAL-10521)

31. An error message that was being displayed regarding disabled interfaces when running a SpeedTest on Digi Remote Manager over a specific interface has been resolved. (DAL-12447)

32. An issue with the auto APN support for AT&T where a blank APN could be used has been resolved. (DAL-12558)

33. An issue that prevented query state data from being uploaded to Digi Remote Manager for a period of time has been resolved. (DAL-12539)

34. An issue with Wi-Fi where the WPA supplicant process was not terminated correctly has been resolved. (DAL-12554)

35. Excessive debug messages related to the scheduling of scripts have been removed. (DAL-12578)

36. An issue with slowdown for certain SSL-based services when FIPS-mode was enabled (Intelliflow, starting containers, as well as reporting Bluetooth and Wi-Fi scanner results to a remote server) has been resolved. (DAL-12575, DAL-12540)

37. An issue where the cellular signal RSRP, RSRQ, and SINR values were not reported for the secondary modem in a TX64-A161 has been resolved. (DAL-12586)

38. An issue with the Wi-Fi client connection time causing an error with the Query State data has been resolved. (DAL-12585)

39. An issue with the system find-me support on the IX40 has been resolved. (DAL-13041)

40. An issue with the IX25 LEDs showing strange transitions of color has been resolved.

41. An issue when checking CID 1 availability has been resolved. (DAL-13051)

42. Removed excessive logging in the EDP client and Power Management.

43. An issue with power management causing unnecessary network reloads on non-Wi-Fi variants of the IX25 has been resolved.

44. An issue with the LE910C4-WWXD modem connecting to Verizon has been resolved. (DAL-13077)

45. An issue where some Query State parameters were not being correctly reported as been resolved. (DAL-13108, DAL-13109)

46. An issue with OpenVPN using TAP bridge mode where the device was not being added to the LAN bridge resulting in packets being dropped has been resolved. (DAL-13066)

47. An issue with WAN Bonding where the connection continually restarts if it the last interface in the list is down has been resolved. (DAL-13095)

48. The EX50 Power LED will now display Green if powered through the power connector or Blue if powered by PoE/PoE+. (DAL-13107)

49. An issue where the IX25 failed to initialize properly during boot has been resolved. (DAL-13183)

50. An issue where the remote endpoint peer label was missing from Digi Remote Manager query_state data has been resolved. (DAL-13124)

51. An issue where a client could lose its networking within an OpenVPN tunnel to a DAL device has been resolved. (DAL-13066)

52. An issue where the wrong MuxID was used for cellular connections has been resolved. (DAL-13103)

53. An issue where QXDM traces couldn’t be run on IX25 RedCap devices has been resolved. (DAL-13128)

54. An issue where Auto-APN push on Verizon was not working properly on 5G RedCap has been resolved. (DAL-13125)

55. An issue where the cellular modem would be reset after the device’s configuration was erased, resulting in minute-long delays in reconnecting, has been resolved. (DAL-13130, DAL-13140)

56. An issue where the System > Reset Behavior setting would not take effect until the device rebooted has been resolved. (DAL-13184)

57. An issue where the System > Reset behavior setting would not be retained across multiple consecutive erase behaviors has been resolved. (DAL-13116)

58. An issue where the query_state data was missing WAN Bonding details has been resolved. (DAL-13201)

59. An issue where SIM failover was not triggered on configuration setups with multiple per-SIM-slot interfaces has been resolved. (DAL-13026)

60. An issue where L2TPv3 tunnels would no longer route from an L2TP interface to LAN has been resolved. (DAL-13076)

61. An issue where the Wi-Fi access points would daily go offline has been resolved.

62. An issue where invalid Wi-Fi information was causing the Query State uploads to fail has been resolved. (DAL-13146, DAL-13226)

63. Some issues with IX25 RedCap platforms not being able to connect to the Verizon network have been resolved. (DAL-13230, DAL-13231)

64. An issue where an IP interface could be lost when a GRE or OpenVPN tunnel was brought down and recreated has been resolved. (DAL-13105)

65. An issue with OpenVPN where not all routes pushed by the OpenVPN server was not being installed has been resolved. (DAL-13145)

66. An issue with 802.1x port authentication on Bridge interfaces has been resolved. (DAL-12751)

Deprecations

1. The health metrics support has been removed from DAL.