Unraid OS 7.4.0-rc.2 is the second release candidate for the upcoming 7.4.0 stable release.

This build brings updated system packages with security fixes, including PHP 8.4.27, which patches CVE-2026-109618 and CVE-2026-109619, a pair of critical (CVSS 9.2) unauthenticated remote code execution vulnerabilities in PHP. It also updates the Linux kernel to 6.18.58-Unraid.

This is a pre-release build. Please use it on test servers only to help validate existing workflows before stable availability.

What's new in rc.2

• PHP 8.4.27, patching CVE-2026-109618 and CVE-2026-109619

• Updated system packages with security fixes and maintenance updates

• Linux kernel update to 6.18.58-Unraid

7.4 series highlights (changes vs. 7.3.2)

Security

• Base distro updates address a range of reported CVEs, including curl, OpenSSL, xorg-server, libxml2, libpcap, jq, Samba, util-linux, glibc, PHP, and nginx

• OpenTerminal validates request inputs before they are used by shell commands

• VM Manager displays guest-agent-supplied network-interface names as text rather than active HTML

• Diagnostics anonymization hides public IPv6 addresses and related diagnostic output

Containers / Docker

• New: multiple custom networks per container template, retained through recreate/update

• New: live container icon URL preview in Add/Edit forms

• New: Memory limit field in Advanced View

• Improvement: registry update checks accept OCI manifests and indexes, identify the Unraid client, and refresh local image info

• Fix: Dashboard Docker icon fallback no longer retries indefinitely

Storage

• New: Mover progress and status tracking (finally!)

• New: SGPIO/IBPI drive-location identification when SES is unavailable

• Improvement: Enter in the encrypted array passphrase field starts the array when valid

• Fix: Mover handles hard links within the same share across separate subfolders

• Fix: File Manager moves between shares on different pools/drives no longer silently remove the source when a transfer fails

• Fix: File Manager keeps exclusive shares on /mnt/user

• Fix: shfs FUSE worker-pool deadlock and unlink assertion crash

• Fix: stopped-array utilization and Boot Device used/free display

WebGUI / System

• New: shared task tray for plugin, Docker, and VM background operations, with recall from any browser tab

• New: physical power button configuration under Settings → Power Settings → Power Button

• Improvement: live plugin-install progress, independent plugin update checks, viewport-scaling task sheets, and license check retries

• Fix: several Plugin Manager and Power Options fixes

Networking / Hardware

• New: additional Intel, MediaTek, and Realtek wireless support (incl. RTW88 8812A/8814A/8821A and RTW89 8851BU/8852BU)

• New: additional game controllers, hardware sensors, and audio codecs

• New: optional Linux netconsole module

• Improvement: network defaults aligned with Fedora's /etc/sysctl.conf baseline

Virtualization

• New: Hyper-V kernel support (storage, balloon, keyboard, virtual-socket)

• Fix: no PHP deprecation warning on VM startup when the QEMU lookup returns nothing

Base distro

• 319 packages updated, 1 added, 1 downgraded, including Docker 29.8.2, ZFS 2.4.4, and dynamix.unraid.net 4.37.5

---

Known Issues

For known issues from the previous release, see the 7.3.2 release notes.

Rolling Back

No new release-specific rollback warnings are documented. For earlier rollback guidance, see the 7.3.2 release notes.

---

Links

• Release Notes

• Updating Unraid

I just updated from RC1 to this new RC2.

I haven't had any problems, it works fine...

It will continue working like this until the next version; I never turn it off or restart it except for Unraid updates.

😊

Updated RC1 to RC2

No issue with update