Version 26.06.3 of Digi On-Prem Manager was released 2026-08-19. This is a bugfix release.

The updated version is available in our APT repository.

2e69b908096f28657ec653db6f3a439c0a0feab105bf5c97a45482d30d8cafff  dom-server_26.06.3_amd64.deb

Changes from v26.06.1 to v26.06.3

• Update DX DAL client to v6.19
  • Fix incorrect model/variant reporting for certain DAL devices, and add support for certain corner cases. (#2470)
  • Move ping latency measurement to the internal management TLS WebSocket connection. (3342be776)
• Security:
  • build: Bump the bundled Go toolchain to 1.26.6. (f68ff2163)
  • http: Harden input validation for certain device-reported and user-provided inputs (defense-in-depth). (#2470)
  • sso: Update the bundled OIDC token library, which has a vulnerability that could cause a temporary DoS of the sso authentication process. (CVE-2026-34986)
• Improvements:
  • dashboard: Move the Warn status button out of the All/Up/Down/Inactive group, to the right of Inactive. (#2458)
  • enrollment: Warn when this server’s address is one devices cannot reach, such as a loopback address. (3a0eec94c)
  • firmware: Name the model code a failed update looked for, and the firmware that is available. (#2470)
  • firmware: Set which model an uploaded file is for, and correct it afterwards, when the filename does not match the device. (#2470)
  • rtask: Improve bulk CSV upload. (#2473)
    • Discard an unconfirmed bulk CSV upload after 30 minutes.
    • Limit bulk CSV upload to 32 MB and 10000 rows, and report which limit was hit.
    • Speed up bulk CSV upload and parsing.
• Bugfixes:
  • csv: Refuse a malformed CSV file, instead of partially importing the first rows. Affects device and bulk RTask upload. (#2473)
  • dashboard: Include online devices with active warnings in the Up filter, so it matches the Up count. Reverses #2402 from v26.06. (#2458)
  • enrollment: Fix a server error when the configured NTP server name is too long. (#2470)
  • firmware: Fix a file uploaded with a lowercased name matching no device. (#2470)
  • firmware: Fix updates failing on certain devices whose reported model matched no uploaded firmware. (#2470)
  • inbox: Restore the missing space before the separator in the Seen column. (a334b3e80)
  • router: Fix the device page failing to load when no uploaded firmware matches its model. (f1b164982)
  • rtask: Fix bulk CSV upload failures. (#2473)
    • Accept device commands that contain double quotes.
    • Let a failing row fail on its own instead of stopping the rest of the batch, including a device deleted after upload. Failures are listed per device.
    • Reject a serial that cannot be registered up front, rather than failing part way through creating the batch.
    • Stop a batch running twice when the confirmation is retried or submitted from two places at once.
    • Stop a server error when returning to a cancelled or expired upload.
    • Stop dropping commands past the 52nd in a row without saying so.
  • rtask: Fix the device RTask list failing to load, in the default view and with a status filter. (#2446, #2463)
  • system: Fix server IP auto-detection, which could fail or pick a loopback address and break enrollment. (f2fd495a1)
  • ui: Fix badge rendering on the enrollment inbox, security log and help pages, and button alignment on the RTask and device pages. (#2447)