Fixed issues

Labels/Rules: enabling "Allow USB mass storage devices" via a label has no effect

"Retain local device configuration" ignored - full all-locked config pushed on every contact

Scout does not recover from unrecoverable ODBC connection

ScoutServer aborts startup on contained AlwaysOn

Rule/label application (icon) not delivered when the rule matches on a client ELUX_* attribute

Image upload requests used an incorrect content type and size settings.

Saved and default views for the management interface Scout Board were not loaded on startup.

Not all Active Directory groups matching a search query were displayed.

Devices could not be renamed in the all-devices table.

Group-based administrators were blocked from logging in via CC authentication.

Clearing the "Hide display (hotkeys)" setting saved an invalid value.

Devices retained stale IDF inheritance after OU move operations.

Schedule times were stored in the server's local time zone instead of UTC.

Dynamic Configuration rules that no longer matched a device did not trigger a configuration rebuild.

The search base field for predefined domains was not editable in the user authentication configuration.

A typo caused Thursday to be incorrectly encoded in schedule strings.

Weekly scheduled jobs fired one day late.

Power Management profiles were incorrectly selected under User Rights.

"Allow USB mass storage devices" configured via a label or rule had no effect.

Multimedia audio volume and mute settings from device configuration were not applied to eLux devices.

Dot1x retry fields in the LAN network editor incorrectly displayed "seconds" as the unit hint instead of "retries".

Newly created predefined firmware configuration paths could not be edited in the management interface Scout Board.

Pressing the ESC key during a rename operation did not cancel the rename or restore the original name.

Report Generator truncated fully qualified name paths at spaces.

Rule matching on OU Path returned no devices when the OU cache was empty.

Clicking on a device in global search had no effect when the device's OU matched the currently viewed OU.

The Scout service crashed during eLux device onboarding.

Scout Board page load times were excessively high when 80 or more Active Directory admin groups were configured.

The management interface Scout Board logged off unexpectedly.

AlwaysOn failover detection failed for SQL Server 2022 Contained Availability Groups.

Setting the screen resolution to "Auto" via a label configuration resulted in an incorrect configuration value.

Timezone and keyboard values were incorrectly resolved during configuration builds triggered by UniconOS Management updates or device onboarding.

Intermittent black screen after Imprivata proximity card unlock

Logoff from Service App desktop not possible

Symbols (asterisk and semicolon) rejected in Proxy Exception List field in device configuration

ScoutHandshake RetryTimer was not applied due to an incorrect setter call

Microphone/speaker volume slider dragged to 0% not activating keyboard mute LED

Microphone mute status LED not following system status on Lenovo E14

Two display ID badges appearing on a single physical monitor after rapid dock hotplug

Monitors running into black when display layout changed

Imprivata username displayed on lock screen when "show username in login screen" is disabled

Session not reconnecting after "Try again" when ReconnectOnLogon=true in kiosk mode

Audio volume too low with local Zoom app — default volume now synced with system volume

Bluetooth scanning does not stop in environments with hundreds of devices

Bluetooth support missing on Lenovo T Series devices due to missing firmware

Local applications could not be created

Volume change inadvertently switching audio output device during MS Teams calls

Cisco Secure Client window was missing minimize/maximize buttons on first boot

Client certificate creation via SCEP failing due to missing CA Identifier option

UniconOS taskbar briefly flashing above session when StorebrowseIPCDisabled=true

eLux devices connected via WiFi not reattempting VPN connection after flaky Internet disconnect

Error "tpm2_nvlist not found" in scep2tpm2.sh

eluxd sending wrong ELUX_DOMAIN with stale OU filter data when network has no domain

Special characters in info fields are not processed correctly.

Firmware update showing misleading error "Denied due to missing Maintenance" when update already in progress

Fixed SCG split-DNS domain handling in eLux

Fonts in the quick system access menu appeared washed out

Keyboard layout resetting from German to English on USB keyboard hotplug

LG AIO models 24CN67 and 24CN6501 failing to boot eLux when default EFI bootloader missing

No selectable resolution options for 32" ultrawide monitor — aspect ratio filtering now uses 5% tolerance

Printers not visible in Citrix session after migration to UniconOS

PulseAudio folder became incompatible, causing CWA to stop redirecting audio devices as CAMV4 after a nightly idle period

Date/Time and Network items in quick system access menu not hidden when disabled in UniconOS Management

Scout Server shown as IP address instead of FQDN in eLux system information

Screen no longer turning off after idle time — ELUX_SOFTLOGOFF not honored during idle timer logoff

Screensaver slideshow and HTML5 modes not functional — showing blank screen instead

Smart Card freezing/slowing down OS performance when inserted in card reader

Two smartcards with same serial number not differentiated correctly

LAN connection via USB cable not working when plugged in after boot

System hanging on shutdown/reboot when update is pending

Taskbar icons becoming corrupt, wrong or question mark icons for Citrix published apps in session sharing

Popup windows blocked HTTP redirects after the first navigation

The EST alias could not be set in est.ini, preventing EST enrollment

Viewing and renewing licenses cannot be disabled in UniconOS according to UniconOS Management user rights

WiFi Enterprise profiles autoconnecting with delay

WiFi profile had autoconnect set to false in NetworkManager

"Invalid server address" shown in device configuration when multiple NTP servers are defined

Various minor bugs fixed

Updated Linux kernel to version 6.18.26

Fixed kernel vulnerability related to dirty.frag (CVE-2026-43284, CVE-2026-43500)

Security updates for Linux kernel due to the critical vulnerability "copy.fail" CVE-2026-31431

Security updates for Linux kernel (RxRPC) due to the critical vulnerabilities CVE-2026-43500

Security updates for Linux kernel (xfrm/ESP) due to the critical vulnerabilities CVE-2026-43284

Security updates for FreeRDP due to the critical vulnerabilities CVE-2026-23530 through CVE-2026-23534

Updated webkit2gtk from version 2.46.5 to 2.50.4, addressing several security vulnerabilities

Security updates for libsoup due to the critical vulnerabilities CVE-2025-32907, CVE-2025-4948, CVE-2025-4969, CVE-2025-4945

The key storage mechanism for SCG communication has been hardened

A local privilege escalation vulnerability has been addressed

A vulnerability related to persistent command execution has been fixed

Updated operating system components with security-related patches

Security updates for webkit2gtk due to the critical vulnerabilities CVE-2024-44192, CVE-2024-54467, CVE-2024-54551, CVE-2025-6558, CVE-2025-13947, CVE-2025-14174, CVE-2025-24143, CVE-2025-24150, CVE-2025-24158, CVE-2025-24162, CVE-2025-24201, CVE-2025-24208–24209, CVE-2025-24213, CVE-2025-24216, CVE-2025-24223, CVE-2025-24264, CVE-2025-30427, CVE-2025-31204–31206, CVE-2025-31215, CVE-2025-31257, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211–43212, CVE-2025-43216, CVE-2025-43227–43228, CVE-2025-43240, CVE-2025-43265, CVE-2025-43272, CVE-2025-43342–43343, CVE-2025-43356, CVE-2025-43368, CVE-2025-43392, CVE-2025-43421, CVE-2025-43425, CVE-2025-43427, CVE-2025-43429–43432, CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-43458, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535–43536, CVE-2025-43541, CVE-2025-66287

Security updates for libsoup3 due to the critical vulnerabilities CVE-2025-2784, CVE-2025-4476, CVE-2025-4945, CVE-2025-4948, CVE-2025-4969, CVE-2025-32050–32053, CVE-2025-32906–32914, CVE-2025-46420–46421

Security updates for FreeRDP 2 due to the critical vulnerabilities CVE-2026-23530–23534

Security updates for ALSA (libasound2) due to the critical vulnerabilities CVE-2026-25068

Security updates for GLib (libglib2.0) due to the critical vulnerabilities CVE-2026-1484

Security updates for intel-microcode due to the critical vulnerabilities CVE-2025-31648

Security updates for libexpat1 due to the critical vulnerabilities CVE-2026-24515, CVE-2026-25210

Security updates for libpng16 due to the critical vulnerabilities CVE-2026-25646

Security updates for libvpx7 / libssh due to the critical vulnerabilities CVE-2026-2447

Security updates for NSS (libnss3) due to the critical vulnerabilities CVE-2026-2781

Security updates for Firefox ESR due to the critical vulnerabilities CVE-2025-8027–8040, CVE-2025-9179–9185, CVE-2025-10527–10529, CVE-2025-10532–10533, CVE-2025-10536–10537, CVE-2025-11708–11715, CVE-2025-13012–13020, CVE-2025-14321–14325, CVE-2025-14327–14331, CVE-2025-14333, CVE-2025-59375, CVE-2026-0877–880, CVE-2026-0882–887, CVE-2026-0890–891, CVE-2026-2757–2780, CVE-2026-2782–2793, CVE-2026-4684–4702, CVE-2026-4704–4721

The function for testing the Active Directory configuration causes onboarding issues.

The backup script does not work flawlessly in all configurations.

Clients revert to the previous SCG certificate after a factory reset and onboarding reboot.

Displayed IP addresses are not correctly validated under certain circumstances.