Fixed issues

Missing translation keys

Help link returns 404

Selecting OIDC auth type not scrollable during installation

OU deletion issue

Icons page showing 404 error

REST-API HTTP 500 errors

Scout Board mirroring "Configure Remote session" button not working

Mirroring session cannot be established when encrypt data transmission is enabled

Search field in rules and labels loses focus

Scout/DBlayer does not recover from ODBC connection

Info fields become non-editable on UniconOS (Permissions)

Device shows no applications after moving to another OU

StickWizz rebuilt with new certificate

Retain local device configuration ignored

Scout Server aborts on AlwaysOn

Rule/Label application icon not delivered to device

Scout Board Dashboard shows wrong entitlement expiry date

SQL injection fixes

Server-Side Request Forgery (CWE-918) in Scout Server.

Monitor layout and primary monitor settings were not retained after reboot.

Application windows moved unexpectedly when the monitor configuration changed.

The screen of a mobile device went blank when an external monitor was rotated.

External displays were disconnected when the laptop lid was closed while docked.

DisplayPort outputs were incorrectly labeled as HDMI in Quick System Access output settings.

Desktop icons disappeared when the system bar was hidden after repeated clicks.

The UniconOS desktop displayed an empty application list after login.

The Start menu appeared empty in rare scenarios after launching specific applications.

Icons could be dragged out of the Start menu.

Quick System Access closed when multimedia keys were pressed.

The taskbar froze while applications remained responsive.

The taskbar displayed an incorrect icon for the local Zoom client.

The "Forgot your password" option displayed an unclear message on the Imprivata login screen instead of a user-friendly notification.

Inserting a second card during a SmartCard pause ended the pause and triggered a logoff.

Smart card insert and removal actions stopped working after repeated card cycles on UniconOS 2601.

The device information hotkey could be used from the AD logon dialog.

OIDC login displayed unclear status notifications.

The PureAuth login screen overlay blocked the "Sign In" button until the dialog was closed.

Citrix Workspace App for Linux configured as a Service App failed to launch.

Built-in browser native launch on StoreFront 2507 displayed the "Detect Citrix Workspace app" page for every session.

ICA and RDP files did not automatically open in all browsers.

Firefox language and proxy settings were not applied after migration from eLux RP 6 to UniconOS.

Monitor layout was not retained after migrating from RP 6 to UniconOS on Dell OptiPlex 7020.

Applications could not be launched after resuming from sleep.

Citrix SelfService was intermittently disrupted when the monitor layout was changed.

Japanese input did not work in launched applications (e.g. Chrome) when the desktop language was Japanese.

Japanese text was truncated or clipped in the Start menu and Quick System Access panels.

The Teams timezone was not updated after the UniconOS timezone was changed.

A Magic Mouse center press was incorrectly interpreted as a middle-click, causing Chrome tabs to close.

Power Management profile selection under User Rights was incorrect.

The 802.1X UI failure notification parameter was not written to terminal.ini when configured in Scout Board.

Devices failed to onboard correctly to the endpoint management system, and the UniconOS system bar was not displayed.

Local updates could not be started while the device was running on battery power.

UniconOS entered a boot loop when the EST configuration contained an incorrect password.

An image update failed on HP t640, causing a status mismatch between Scout Board and update logs.

The SCG health probe generated excessive Scout handshake traffic by using a full TLS manager connection for liveness checks.

The USB printer was not set as the default printer at first boot.

Bluetooth devices lost their connection and required re-pairing to function again.

Cisco 322 MS headset call controls did not function with the Cisco Jabber VDI plugin.

The local audio device was disabled after an extended idle period, although audio continued to function within the Citrix session.

Lenovo E14 Gen 7 became unresponsive after locking.

Signature processing on StepOver sign pads was delayed.

The screensaver ignored the configured delay and activated after one minute while the device was locked.

The screensaver was triggered during Zoom meetings.

WPA Supplicant did not start when IEEE 802.1X was enabled.

Split DNS intermittently failed after multiple consecutive updates.

Upgraded Linux kernel to version 6.18.38.

Security updates for alsa due to the critical vulnerability CVE-2026-25068.

Security updates for GStreamer due to the critical vulnerability CVE-2023-50186.

Security updates for libsoup3 due to the critical vulnerabilities CVE-2026-1467, CVE-2026-1536, and CVE-2026-1539.

Security updates for openjpeg due to the critical vulnerability CVE-2026-6192.

Security updates for xorg due to the critical vulnerabilities CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, and CVE-2025-26601.

Resolved an issue where an editable home directory shared between users allowed one user to run arbitrary commands as another.

Raised the NetworkAccessControl default RSA key length to 4096 bits.

Added HTTPS support for SCEP enrollment.

Security updates for Firefox ESR due to the critical vulnerabilities CVE-2026-5731–5732, CVE-2026-5734, CVE-2026-6746–6754, CVE-2026-6757, CVE-2026-6759, CVE-2026-6761–6767, CVE-2026-6769–6772, CVE-2026-6776, CVE-2026-6785–6786, CVE-2026-7320–7323, CVE-2026-8090–8092, CVE-2026-8094, CVE-2026-8388, CVE-2026-8391, CVE-2026-8401, CVE-2026-8946–8947, CVE-2026-8949–8950, CVE-2026-8953–8959, CVE-2026-8961–8962, CVE-2026-8968, CVE-2026-8970, CVE-2026-8974–8975, CVE-2026-12289–12292, CVE-2026-12294–12299, CVE-2026-12302, CVE-2026-12304–12315, CVE-2026-12324–12325, CVE-2026-12327–12330

Security updates for base OS due to the critical vulnerabilities CVE-2017-9814, CVE-2019-6461, CVE-2019-6462, CVE-2023-52890, CVE-2025-0167, CVE-2025-7519, CVE-2025-61143, CVE-2025-61144, CVE-2026-1965, CVE-2026-3731, CVE-2026-3783, CVE-2026-3784, CVE-2026-3832, CVE-2026-3833, CVE-2026-4873, CVE-2026-4878, CVE-2026-4897, CVE-2026-5260, CVE-2026-5545, CVE-2026-5773, CVE-2026-6192, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168, CVE-2026-27135, CVE-2026-28387–28390, CVE-2026-29111, CVE-2026-31431, CVE-2026-31789, CVE-2026-31790, CVE-2026-33416, CVE-2026-33636, CVE-2026-33845, CVE-2026-33846, CVE-2026-34757, CVE-2026-35058, CVE-2026-40215, CVE-2026-40706, CVE-2026-41989, CVE-2026-42009–42015

Security updates for PXE recovery due to the critical vulnerabilities CVE-2017-9814, CVE-2019-6461, CVE-2019-6462, CVE-2025-0167, CVE-2026-1965, CVE-2026-3731, CVE-2026-3783, CVE-2026-3784, CVE-2026-3832, CVE-2026-3833, CVE-2026-4873, CVE-2026-4878, CVE-2026-5260, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168, CVE-2026-27135, CVE-2026-28387–28390, CVE-2026-29111, CVE-2026-31431, CVE-2026-31789, CVE-2026-31790, CVE-2026-33416, CVE-2026-33636, CVE-2026-33845, CVE-2026-33846, CVE-2026-34757, CVE-2026-41989, CVE-2026-42009–42015

Security updates for system libraries due to the critical vulnerabilities CVE-2025-5918, CVE-2025-60753, CVE-2026-4111, CVE-2026-4424, CVE-2026-4426, CVE-2026-5121, CVE-2026-6192, CVE-2026-24401, CVE-2026-34933, CVE-2026-42046

Security updates for base printer due to the critical vulnerabilities CVE-2026-24401, CVE-2026-34933

Security updates for desktop environment due to the critical vulnerabilities CVE-2017-9814, CVE-2019-6461, CVE-2019-6462, CVE-2025-5918, CVE-2025-60753, CVE-2026-2340, CVE-2026-2921, CVE-2026-3012, CVE-2026-3238, CVE-2026-4111, CVE-2026-4408, CVE-2026-4424, CVE-2026-4426, CVE-2026-4480, CVE-2026-5121, CVE-2026-5201, CVE-2026-28295, CVE-2026-28296, CVE-2026-34080, CVE-2026-41254, CVE-2026-46529

Security updates for eLux desktop due to the critical vulnerabilities CVE-2026-46529

Security updates for GStreamer due to the critical vulnerabilities CVE-2026-464, CVE-2026-2921, CVE-2026-3083, CVE-2026-3085, CVE-2026-46469, CVE-2026-46470

Security updates for PulseAudio due to the critical vulnerabilities CVE-2026-2921

Security updates for Firefox (jq) due to the critical vulnerabilities CVE-2026-32316, CVE-2026-33947, CVE-2026-33948, CVE-2026-39956, CVE-2026-39979, CVE-2026-40164

Security updates for devel tools due to the critical vulnerabilities CVE-2025-10158, CVE-2026-25749, CVE-2026-26269, CVE-2026-28417–28422, CVE-2026-29518, CVE-2026-33412, CVE-2026-34982, CVE-2026-39881, CVE-2026-41035, CVE-2026-41411, CVE-2026-42307, CVE-2026-43617–43620, CVE-2026-44656, CVE-2026-45130, CVE-2026-45232

Security updates for SSH client due to the critical vulnerabilities CVE-2025-61984, CVE-2025-61985, CVE-2026-3497, CVE-2026-35385–35388, CVE-2026-35414

Security updates for SSH server due to the critical vulnerabilities CVE-2025-61984, CVE-2025-61985, CVE-2026-3497, CVE-2026-35385–35388, CVE-2026-35414

Security updates for video libraries due to the critical vulnerabilities CVE-2026-3731

Security updates for Squid due to the critical vulnerabilities CVE-2026-32748, CVE-2026-33515, CVE-2026-33526

Security updates for Fujitsu MAPT due to the critical vulnerabilities CVE-2026-25749, CVE-2026-26269, CVE-2026-28417–28422, CVE-2026-33412, CVE-2026-34982, CVE-2026-39881, CVE-2026-41411, CVE-2026-42307, CVE-2026-44656, CVE-2026-45130

Security updates for QEMU Guest Agent due to the critical vulnerabilities CVE-2024-6519, CVE-2026-2243

Security updates for Python3 due to the critical vulnerabilities CVE-2017-9814, CVE-2019-6461, CVE-2019-6462