RUT276 Firmware Downloads

Main Page > RUT Routers > RUT276 > RUT276 Firmware Downloads

This page contains firmware files for RUT276 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in RUT276 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

RUT276

File	Type	Release date	Size	MD5	Links
RUTE_R_00.07.20.3_WEBUI.bin	Stable FW	2026.01.23	18 MB	775a4a55ab165df5601b08debb122461	Changelog API
RUTE_R_00.07.21.2_WEBUI.bin	Latest FW	2026.03.06	18 MB	a4b550a504cf6e68a3a650981d680376	Changelog API
RUTE_R_GPL_00.07.21.2.tar.gz	SDK	2026.03.06	48 MB	3ef1f1182d5b81159af4bcb65e640935

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTE_R_00.07.21.2 | 2026.03.06

New
- Network
  - Mobile: added eSIM activation through proxy server
Improvements
- System
  - Site manager: added configurable DHCP option for client discovery
  - Site manager: added access control loss warning
Fix
- Network
  - Network: fixed an edge-case network hang after device reboot
- Services
  - Data to Server: fixed memory leak when using IEC 60870 5 as input and using output with custom format

RUTE_R_00.07.21.1 | 2026.02.26

Fix
- System
  - Kernel: fixed certain devices failing to boot
  - Site manager: fixed missing config files in SDK

RUTE_R_00.07.21 | 2026.02.17

Note: To ensure optimal performance, this firmware version has been removed due to an issue where the device may become unresponsive after a power cycle.

New
- Network
  - Mobile: added "m2m" APN for "Spark M2M" operator to APN database
  - Mobile: added "iot" APN for "One NZ IOT" operator to APN database
  - MPLS: added LDP support
- System
  - PAM: added TACACS+ external user support
  - Site manager: added site manager functionality
Improvements
- Network
  - Firewall: added IPv6 masquerading support
  - Mobile: added SIM switch rule "On operator or country code"
  - Mobile: improved mobile data connection times on some cellular networks
  - Network: added IPv4 subnet conflict warning and notification
  - Wireless: added WPA2-PPSK authentication support
  - ethtool: updated version to 6.15
  - Netifd: updated version to 2025-05-23
- Services
  - BGP: added debug option
  - Data to Server: moved "Add new" button to table header for smaller screens
  - Data to Server: added failed MQTT messages count to MQTT server to restart broker connection when threshold is reached
  - DLMS: added options for configuring the logical and short name on a COSEM value
  - DLMS: improved test requests to not freeze when running many of them at the same time
  - Event juggler: moved "Add new" button to table header for smaller screens
  - IPsec: added ability to specify local and remote passthrough networks
  - Modbus Client: improved test requests to not freeze when running many of them at the same time
  - Modbus Client: added tolerance and tolerance timeout options for on-change storage with threshold comparisons and periodic refresh
  - MQTT Broker: updated TLS option names
  - MQTT Broker Bridge: updated TLS option names
  - OPC UA Client: loosened data type validations, allowing more versatile data extraction
  - OPC UA Server: added support for configuring data sources, which allows exposing values from other services
  - OpenVPN: added support for generating client configuration from the server configuration
  - OSPF: added debug option
  - RIP: added debug option
  - SNMP: added multiple hosts support in Trap Settings
  - SNMP: added Data Source support
  - SNMP: added warning stating that selected Authentication type MD5 is not secure
  - SNMP: made SNMP community names hidden for unprivileged users
  - SSTP: added IPv6 support
  - TR-069: added TLS and mTLS support
- System
  - CLI: added opkg notice about using third-party feeds
  - NTP Client: improved initial system time accuracy when "Save time to flash" is enabled
  - Update Firmware: split firmware update page to device and modem tabs
  - Update Firmware: added latest/stable firmware option in firmware page
  - WebUI: improved search performance
  - WebUI: expanded search function to include results from available to install packages in package manager
  - WebUI: updated footer design
  - WebUI: added footer customization options for GPL builds
  - Wireless Reboot: added Wireless Reboot functionality for wireless hang monitoring
  - Kernel: updated version to 5.15.197
Fix
- Network
  - DHCP server: added validation to prevent bridge and passthrough IP address usage for static leases
  - Mobile: fixed SIM PINs being kept in MNF when performing a factory reset with a SIM inserted
  - Multi AP: fixed incorrectly displayed access point enable switch state
  - Multi WAN: fixed failover not working after changing firewall settings
  - Network usage: fixed multiple issues that prevented the table from displaying
  - Static Routes: fixed applying static IPv6 routes after device restart
  - Wireless: fixed displaying associated client information when more than 270 clients are connected
- Services
  - Azure IoT Hub: fixed timed out message re-sending in some edge cases
  - Data to Server: fixed example Lua output script not working correctly with data containing double quotes
  - DLNA: fixed interfaces not having WLAN
  - DNP3 Outstation: fixed binary output status data type in outstation data sources
  - Dynamic DNS: fixed core handling of user input for 'cloudflare.com-v4'
  - Event juggler: fixed SMS action retry functionality not working in certain cases
  - Event juggler: fixed incorrect configuration parsing
  - GRE: fixed state display when used with IPsec
  - Hotspot: fixed issues with download/upload limits
  - IEC 60870-5 Server: fixed validations when saving multiple configurations
  - IPsec: fixed firewall rule handling when instance is deleted
  - IPsec: fixed route based interface to be disabled when instance is disabled
  - IPsec: removed disabled state from "logs" and "active clients" when user has no write permissions
  - IPsec: fixed status endpoint to ignore zombie clients
  - IPsec: fixed DNS server update on connection
  - IPsec: fixed ID validation for API Post
  - Modbus Client: fixed Modbus write request function validation in Modbus TCP Client
  - Modbus Client: changed test requests to use the correct request ID
  - Modbus Client: fixed validation in Modbus Device requests, requests configuration now displays full function name
  - Modem Control: fixed flashing cached data when closing modal
  - NTRIP: fixed web interface to accept IPV6 addresses in server settings
  - OSPF: fixed interfaces not having WLAN
  - Package Manager: fixed removing orphan packages when any package dependency is not installed
  - RIP: fixed interfaces not having WLAN
  - RMS: fixed reconnection problem
  - RMS: fixed reconnection timer reset issue
  - SSTP: fixed address parsing when a URL protocol is used
  - SSTP: fixed adding routes to remote server
  - Wireguard: fixed startup after device reboot
  - Zerotier: fixed custom planet file permissions
- System
  - JSON-RPC: fixed permissions for "file" methods
  - Profiles: excluded Data Limit and IP Block databases from profiles
  - Update Firmware: fixed download from FOTA after cancelling firmware upload

RUTE_R_00.07.20.3 | 2026.01.23

Fix
- Services
  - Data to Server: fixed IEC 60870 data sender plugin failing to load

RUTE_R_00.07.20.1 | 2026.01.05

Fix
- System
  - Boot: fixed WAN ethernet led behaviour during boot on devices with specific hardware version
- Services
  - DDNS-scripts: improved core handling of user input

RUTE_R_00.07.20 | 2025.12.16

New
- Network
  - Mobile: added "mobileinternet.tele2.lt" APN for "Tele2" operator to APN database
  - Wireless: added support for a global installation type option for radio devices
- Services
  - Data to Server: added IEC 60870-5 Client as an input
  - IEC 60870-5 Client: added IEC 60870-5-104 Client
  - IEC 60870-5 Server: added IEC101 and IEC104 support
- System
  - Package Manager: added CIFS/SMBFS filesystem support
Improvements
- Network
  - 802.1X Client: updated 802.1x validation so that 802.1x client can no longer be enabled on a port that is disabled
  - 802.1X Server: updated 802.1x validation so that 802.1x server can no longer be enabled on a port that is disabled
  - DHCP server: improved "DHCPv6-Mode" field's option names and hints
  - Mobile: improved log message when no primary SIM is set
  - Mobile: improved DFOTA log message when checking for updates
  - Mobile: added "Switch to next SIM" button in 'Status -> Mobile' page
  - Mobile: improved mobile data connection establishment time
  - Mobile: improved mobile connection bring up behavior when the "Service option not subscribed" error is received
  - Multi WAN: added IPv4 and IPv6 WAN interface coexistence warning
  - Network: improved interface creation and deletion speed in some situations
  - Network: improved "Force link" field hint
  - Network: fixed "Force link" field to respect default value when changing interface protocol
  - SSHFS: updated setting fields to be shown when service is disabled
  - SSHFS: added directory as prefix to "Mount point" field
  - ethtool: updated version to 6.10
- Services
  - AWS IoT Core: updated orange error status to be red
  - Azure IoT Hub: updated status columns to use text badges instead of circle icons
  - Data to Server: updated input sections to be toggleable
  - Data to Server: added certificates to global certificate manager
  - Data to Server: increased the limit for Modbus data filtering entries
  - Event juggler: added certificates to global certificate manager
  - L2TP: improved adding custom options to the configuration

- - MQTT Broker: added certificates to global certificate manager
  - MQTT Broker Bridge: added certificates to global certificate manager
  - MQTT Publisher: added certificates to global certificate manager
  - SD & USB Tools: added additional mounting behavior options
  - SMPP: added certificates to global certificate manager
  - SNMP: added additional info to Trap message
- System
  - Certificates: changed SCEP enrollment to try AES first and fall back to 3DES
  - RutOS: updated login banner to include internal API usage
  - Kernel: updated version to 5.15.196
Fix
- Network
  - Firewall: removed low contrast zone colors
  - Mobile: fixed SMS Limit excessive logging
  - Network: fixed PPPoE client options not being removed after switching to other protocol
  - Network: fixed routing table rules not matching interface metric order
  - Realtime Traffic: fixed traffic history not showing up in some cases
  - Realtime Traffic: fixed plot background rendering when switching between plots
  - Realtime Traffic: fixed plot popover position on Firefox 143 and later
  - Wireless: fixed authentication timeout during fast transition
  - Wireless: fixed retrieving empty cached wireless scan results
- Services
  - Azure IoT Hub: fixed empty status hint
  - DNP3 Client: fixed display issues with long request names
  - DNP3 Outstation: fixed display issues with long request names
  - Dynamic DNS: fixed bind-nsupdate method not working on multi-level subdomains
  - Event juggler: fixed HTTP action request type
  - Hotspot: fixed session data delete when deleting user
  - L2TP: fixed log display in WebUI
  - Modbus Client: fixed duplicate query parameters validation in database entries endpoint
  - Modbus Client: fixed display issues with long request names
  - Modbus Server: fixed display issues with long request names
  - MQTT Broker: fixed 'Allow persistence' option
  - OPC UA Client: fixed duplicate query parameters validation in database entries endpoint
  - OPC UA Client: fixed API error when 'server_node' option had an incorrect type in group values test endpoint
  - OpenVPN: fixed status in Static Key Authentication mode
  - OpenVPN: fixed handling of 'user' and 'group' parameters
  - RMS: fixed connection status jumping between "Connecting" and "Connected" states
  - SD & USB Tools: fixed API error when 'fs' option was not provided for safe_remove, format endpoints
  - SMS Utilities: fixed script action execution when arguments are provided
- System
  - Certificates: fixed importing DER keys to TPM
  - RutOS: fixed rare UCI deadlock causing system hangs
  - Speed Test: fixed selecting WAN interface when using servers with IPv6 support
  - System Users: fixed redundant /etc/group member creation
  - WebUI: fixed target area that triggers hint text
CVE Patches
- CVE-2025-46394 - 3.3 (LOW)

RUTE_R_00.07.19.4 | 2025.12.05

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

RUTE_R_00.07.19.2 | 2025.11.26

Fix
- System
  - Update Firmware: fixed firmware download cancellation

RUTE_R_00.07.19.1 | 2025.11.12

Fix
- System
  - WebUI: fixed unresponsive navigation after password change

RUTE_R_00.07.19 | 2025.11.06

New
- Network
  - Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
Improvements
- Network
  - DHCP server: added message to Events Log when there are no available DHCP addresses
  - Firewall: added status to Traffic Rule page
  - Firewall: added status to Port Forwards page
  - Firewall: added status to NAT page
  - Firewall: added status to DMZ page
  - Firewall: updated status page to have chain and rule tables for better searchability
  - Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
  - HTTPS DNS Proxy: disabled field requirements when service is disabled
  - Mobile: improved mobile operator parsing for connection establishment
  - Mobile: updated default SIM selection in Mobile General page
  - Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
  - Mobile: added more information about SIM state changes in logs
  - Mobile: improved error handling during mobile data connection bringup
  - NAT64: added status to NAT64 page
  - Network: improved DHCP client and server related fields
  - VLAN: improved VLAN configuration save and apply speed in some cases
- Services
  - Cloud of Things: changed communication from HTTP to MQTT
  - Cumulocity: changed communication from HTTP to MQTT
  - EoIP: added IPv6 support
  - Event juggler: added `io_reset` option
  - GRE: added IPv6 support
  - MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
  - NTRIP: added IPv6 support
  - OpenVPN: improved page load speed by removing duplicate data request
  - SNMP: added SET support for universal gateway tag value table
  - Stunnel: added support for using IPv6 addresses in the connect IPs field
  - Wireguard: added wireguard watchdog support
  - cURL: updated version to 8.16.0
  - OpenVPN: updated version to 2.6.14
- System
  - Custom Scripts: added page loading spinner
  - Speed Test: added support for custom server url
  - Update Firmware: improved FOTA communication and caching logic
  - WebUI: improved usability on small screens
  - Kernel: updated version to 5.15.193
  - PAM: updated version to 1.7.1
Fix
- Network
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DNS: fixed "Static addresses" and "Custom redirect" field required validation
  - Dynamic routes: fixed services other than EIGRP restarting on network change
  - Firewall: added IPsec and OpenConnect configurations as possible networks
  - Firewall: fixed NAT extra custom rules not applying after FW upgrade
  - HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
  - Mobile: fixed informational messages when SIM configuration is not found
  - Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
  - Mobile: fixed updating modem firmware when custom root CA is configured
  - Mobile: fixed missing modem firmware version after modem firmware update
  - Multi WAN: fixed Multi WAN interface creation
  - Ports Settings: fixed ports re-enabling themselves after changing certain settings
  - Wireless: fixed invalid mesh interface encryption data reporting
  - Wireless: fixed excessive Wi-Fi service log file creation due to service restarts
  - Wireless: fixed "Allow legacy 802.11b rates" option not working properly
  - Wireless: fixed missing background scan data in learn mode
- Services
  - DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
  - DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
  - DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
  - DNP3 Client: fixed dnp3 test function printing analog values in wrong format
  - DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
  - Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
  - Email to SMS: fixed process hang during email handling
  - IPsec: fixed an issue where connections could be re-initiated even while being active
  - IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
  - IPsec: fixed Xauth connections not establishing when identifiers are set
  - IPsec: fixed wrong active client information when using certificates
  - IPsec: fixed incorrect uptime display when using multiple responder instances
  - L2TP: fixed L2TP over IPsec connection issue
  - L2TPv3: fixed parameter validation for IPv6 addresses in configuration
  - Modbus Client: fixed email and MQTT alarm actions running longer than intended
  - Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
  - Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
  - MQTT Broker: fixed TLSv1.1 configuration
  - OpenConnect: fixed 'Get server fingerprint' feature on IPv6 servers
  - OpenConnect: fixed displaying IPv6 address under Tunnel IP address
  - OpenVPN: fixed parsing uploaded custom OpenVPN configuration
  - OpenVPN: fixed issues with parsed fields being displayed after config deletion
  - OpenVPN: fixed configuration parsing issues related to security options
  - SMS Forwarding: fixed certificate verification disabling
  - Wireguard: fixed creation of routes to endpoint host when default route is not set
- System
  - Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
  - Administration: fixed incorrect creation date of user's default configuration
  - API Core: fixed API error on 'DELETE' request with bad payload structure
  - Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
  - Setup Wizard: fixed redirect of "RMS" step
  - System Users: fixed multiple network pages working improperly with non-root users
  - WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
  - WebUI: removed bell notifications from modals
  - WebUI: fixed length validation for custom input values in select lists
  - WebUI: fixed active state of filters on tables
CVE Patches
- CVE-2025-4373 - 4.8 (MEDIUM)
- CVE-2025-6020 - 7.8 (HIGH)
- CVE-2025-6052 - 7.5 (HIGH)

RUTE_R_00.07.18.2 | 2025.10.22

Initial firmware release