74 openlast updated

HomeOctober 2026 patch cycleRouterOS 7.25: your router forgot how to IPv6

DeployEnterpriseHomelabfrom 2026-10

RouterOS 7.25: your router forgot how to IPv6

Part of October 2026 patch cycle

Vendor
MikroTik
Products
RouterOS 7.25 and RouterOS 7.25.1
Published
· updated
Status
Resolved

Update, Nov 4: fixed in 7.25.1. MikroTik released RouterOS 7.25.1 stable on Nov 2 (release thread, changelog mirror). It carries the IPv6 fix, “ipv6 - fix from-pool address lifetimes not updating after a prefix renewal (introduced in v7.25),” along with fixes for other 7.25 regressions:

  • CAPsMAN/Wi-Fi: “fix virtual interface restart loop when reselect-interval and reselect-time are configured (introduced in v7.25).” That matches the CAPsMAN flapping reports below.
  • DHCPv4 client: “fix packet length calculation (introduced in v7.25).” MikroTik doesn’t tie it to the “searching” reports, but it’s the same component.
  • Also fixed: PIM’s IGMP/MLD querier being disabled after upgrade, SSH with SHA-1, custom SSH client login parameters, and WebFig showing multi-value fields as empty, all introduced in 7.25. The “system - improve stability” line now includes CVE-2026-98432, the Linux kernel TCP use-after-free.

The call goes from Known issue to Deploy 7.25.1, and this one is closed. Two loose ends from the first day of the release thread, one report each: a hAP be lite owner says Wi-Fi clients still can’t connect on 7.25.1 and went back to 7.24.6, while another hAP be lite owner on CAPsMAN reports no trouble. A CCR2004-1G-12S+2XS owner says the router hung on boot after the RouterBOOT upgrade until a power cycle. Neither is confirmed by MikroTik. If you have a hAP be lite, do it last.

Call: Deploy 7.25.1. Skip 7.25.0. If you held at 7.24.x because of the regressions below, 7.25.1 is the version to move to. It also picks up the two security fixes from 7.25, CVE-2026-31431 and CVE-2026-67280, and the CVE-2026-98432 kernel fix.

What broke in 7.25:

  • IPv6 after DHCPv6-PD renewal. Fixed in 7.25.1. After a prefix renewal, the lifetimes on from-pool addresses didn’t update, so the addresses went deprecated. The router could lose its own IPv6 connectivity and start sourcing traffic from ULA addresses. About eight users reported it.
  • CAPsMAN interface flapping. Fixed in 7.25.1. Interfaces looped through start and stop when reselect-interval was set.
  • hAP be lite (reported, not confirmed by MikroTik). Wi-Fi and MLO failures, and some units went into a reboot loop. One user says 7.25.1 didn’t fix it.
  • DHCPv4 client stuck on “searching” (reported, not confirmed by MikroTik) with some ISPs. Two users reported it. 7.25.1 fixes a DHCPv4 client packet-length bug introduced in 7.25, which may be the same thing.
  • WinBox 3 no longer works. You need WinBox 4. That hasn’t changed.

What to do:

  • Upgrade to 7.25.1 from System > Packages, stable channel. Back up and export first, as MikroTik asks.
  • Remove the 7.25 workarounds once you’re on 7.25.1: static IPv6 addresses you used instead of from-pool ones, and removed reselect-interval settings, if you want them back.
  • Upgrade RouterBOOT afterward as usual, but have a way to power-cycle the box if it’s remote.
  • hAP be lite: if Wi-Fi still fails on 7.25.1, downgrade or netinstall 7.24.x. Upload both the RouterOS and wifi packages, then use System > Packages > Downgrade.

Sources: MikroTik forum: 7.25.1 stable is released, RouterOS 7.25.1 changelog mirror, MikroTik forum: 7.25 stable is released, updateorwait, RouterOS changelog mirror: ipv6, MikroTik forum: from-pool addresses toggling to deprecated.

Sources

More from October 2026 patch cycle