Version 2025.2 Official Release — June 18 2025$$$New: Support for Windows Server 2025.$$$New: Guaranteed performance benchmark.$$$Improved: Standard time format for automation: “TSTR” is a new variable timestamp in Server nhLocal string YYYYMMDD_HHMM for filename usage.$$$Improved: cURL updated to 8.14.0 to address two known vulnerabilities: CVE-2025-5025 and CVE-2025-4947$$$Improved: Upgraded Webview2 evergreen runtime installer to 136.0.3240.76$$$Fixed: Client UI: CSRF token no longer appears in GET request URLs.$$$Fixed: Web client Unzip functionality no longer displays errors.$$$Fixed: Adding an option to skip Key Exchange format for folder scanning.

Version 2025.1.1 Official Release — March 25 2025$$$New: Minor text updates to the summary renewal UI

Version 2025.1.1 Official Release — March 25 2025$$$New: Minor text updates to the summary renewal UI

Version 2025.1.0 Official Release — March 18 2025$$$New: The Getting Started Wizard now features a refreshed UI and allows for immediate setup of public sharing after installing Cerberus.$$$New: Themes support in the web client is now fully supported with the updated UI.$$$Improved: OpenSSL updated to 3.0.16 to address known vulnerabilities:$$$CVE-2024-12797$$$CVE-2024-13176$$$Improved: Curl updated to 8.12.1 to address known vulnerabilities:$$$CVE-2025-0725$$$CVE-2025-0665$$$CVE-2025-0167$$$CVE-2024-11053$$$Fixed: UI issue when sharing a file in the web client.$$$Fixed: SFTP now correctly handles time-based folder scan filtering.$$$Fixed: File scan event over SFTP now correctly scans a folder when attempting to use a public key for RSA/DSA/ECDSA.$$$Fixed: “FRFP” is a new variable name in the event system actions ‘Send/Get a File’ and ‘Scan a Folder.’

Version 2024.4.0 Official Release — 12/10/2024$$$New: Added ability to assign multiple Native users to a Primary group.$$$Improved: Upgraded jquery.validate to 1.21.0$$$Improved: Scan a Folder scheduled task actions may now select a SFTP remote system to list in addition to a local folder (SFTP/FTP/FTPS/Local Folder).$$$Improved: Updated Client UI.$$$Improved: Upgrade cURL to 8.11.0 for addressing CVE-2024-9681 and CVE-2024-8096.$$$Fixed: Improved malform zipname detection.$$$Fixed: Deleting member from group no longer drops group membership issue in Microsoft Entra.$$$Fixed: SSO Group Mappings no longer limited to first 1000 groups; and not alphabetically sorted.$$$Fixed: New Security Updates.$$$Fixed: Error after submitting account request.

Version 2024.3.0 Official Release — 9/18/2024$$$$$$Improvement: Update first run wizard to show new feature$$$Improvement: Identify IP address type in IP Manager$$$Improvement: Verify correct IP format is inserted in IP Manager$$$Improvement: Extend the “File Scanned Event” to handle the SFTP client mlsd formats$$$Improvement: Dev Work CFS-3509: Upgrade cURL to 8.9.1 $$$Fixed: SOAP API: GetUserInformationRequest not working$$$Fixed: Cerberus logs showing certificate errors with www.cerberusftpserver.com$$$Fixed: Cerberus 24.2 Broken dropdown for user Web client$$$Fixed: Setup Wizard – Extra Folders Created under User Home Directory; change messaging for results

Version 2024.2.1 Official Release — 7/23/2024$$$Event manager can now support UNC paths for ‘Get a file’ in Scheduled Tasks$$$Upgraded cURL to Version 8.8.0 (used for transferring data to and from a server)$$$Upgraded OpenSSL to Version 3.0.14 or the latest version (used for generating private keys and identifying certificate information)$$$Made improvements to Installation Wizard to provide additional user options for configuration$$$Updated text and icon for two-factor authentication for SSH/SFTP/SCP$$$Updated End User License Agreement (EULA) to the latest Redwood Software version$$$In User Manager?Groups; ‘Allowed Protocols’ and ‘Virtual Directories’ are now visible on all group information tabs$$$SSH public keys are now exported in UTF-8$$$‘Blank Value’ now accepted in Event Rules Variables$$$Made improvements to File operations (Copy/Move/Delete) while using ‘File Scanned Events’

Version 2024.2.0 Official Release — 5/22/2024$$$ $$$$$$New: Ability for an admin to restrict all public share users from zipping files$$$New: Added support to import IP addresses in csv format for Firewall Management blocklists$$$Improved: Added certificate chain validation when updating TLS certificate$$$Improved: Event system disabled the “Run” button when a rule is disabled or doesn’t have an associated action$$$Improved: Scan a Folder scheduled task actions may now select a remote system to list in addition to a local folder (FTP/FTPS/Local Folder)$$$Improved: Scanned File Event Rules may now filter files based on timestamps$$$Improved: Unlicensed features now display with a link that describes the feature. This can be hidden in the Help/Licensing menu$$$Improved: Account Reports now include two-factor authentication status$$$Improved: Allow ignoring two-factor authentication during SSH SFTP/SCP login$$$Improved: Directory deletions are now reflected in the File Report separately from file deletions

Version 2024.1.2 Official Release — 3/15/2024$$$Fixed: Remove FIPS module signature conflict $$$Fixed: Edit action on Scheduled Task now includes ‘Report:’ to select a saved query

Version 13.2.1 Official Release — 12/13/2023$$$Improved: UI enhanced for Public Share administration$$$Improved: Added a One Time Password auto-unlock feature to the administration page for public shares$$$Improved: Added file size to Get/Send-A-File logs$$$Improved: Corrected appearance and layout of 2FA UI Page of Web Client after upgrade to Bootstrap 5.3.1 Version$$$Improved: In Web Client login page the panels for Login form and Welcome message are widened appropriately$$$Improved: Changing admin passwords now requires current primary admin validation$$$Improved: First-time Setup Wizard now requires an admin password when not yet set$$$Improved: Improved security warnings: summary page now warns on non-SSL LDAP authentication$$$Fixed: Authenticated user remote full path disclosure (CVE-2023-50452)$$$Fixed: Public share download button$$$Fixed: Reset check all box when navigating directories in folder view for client & public shares$$$Fixed: Fix crash when SSH client sends incorrectly sized packet for key exchange$$$Fixed: Generate SSH compatible DSA host keys$$$Fixed: Disable SSH DSA host key in FIPS mode$$$Fixed: Removed sourcemap references from JS & CSS files$$$Fixed: SAML SSO now uses Reply URL for SSO Config selection. This fixes authentication failures when multiple SSO Configs use the same Identity Provider$$$Fixed: SOAP failed to complete Service restart

Version 13.1 Official Release — 9/5/2023$$$New: Added multi-key support for SFTP/SCP$$$New: Added new web-based SSH Key management dialog to Web Administration$$$New: Added new web-based Certificate Signing Request (CSR) dialog to Web Administration$$$New: Added new web-based SSH Public Key exporter dialog to Web Administration$$$New: Add support for EXT_INFO message in SSH$$$New: Upgraded OpenSSL to 3.0.10$$$New: Upgraded cURL to 8.2.1$$$New: Upgraded log4cxx to 1.1.0$$$Improved: Added X.509 SubjectPublicKeyInfo format to SSH Public Key exporter$$$Improved: Updated web-based Self-Signed Certificate to include additional supported certificate types$$$Improved: Added additional certificate types to CSR$$$Improved: SAML User Atttributes may now be customized for Azure AD SSO configurations$$$Improved: Expanded auditing of manual user and group creations and deletions$$$Improved: Added additional logging to Backup Users and Settings$$$Removed: Old Windows dialog based native console only CSR and SSH Export menu items from Tools menu$$$Fixed: Made Event RegEx comparisons case-insensitive as variables are always lowercase$$$Fixed: OpenSSH 8.8+ will now connect when Cerberus has an RSA host key$$$Fixed: ‘Password Change Required’ checkbox now correctly works for “unchecked” option also for all the scenarios.$$$Fixed: Active Directory users no longer need read-access to the Cerberus FTP Server installation directory.$$$Fixed: Corrected handling of CIDR IP addresses.$$$Fixed: Virtual Directory listing fixed in ‘New User’ and ‘New Group’ wizards$$$Fixed: Prevent Event Rules with Match All and no conditions from running