Unraid | Unraid OS 7.3.2 Release Notes | Security Fix, Kernel 6.18.38 & More

Unraid News

8 July 2026

Unraid OS 7.3.2 Now Available<br>Unraid 7.3.2 is a security and bugfix release with an updated Linux kernel, a critical WebGUI security fix, Docker VLAN networking improvements, and 70+ updated base packages.

Unraid 7.3.2 is out now with a critical WebGUI security patch, security updates across dozens of core packages, a kernel upgrade to 6.18.38, Docker VLAN networking fixes, storage and boot-pool corrections, virtualization UI fixes, Unraid API 4.35.1, and several base package updates.<br>This update is recommended for all users.<br>Security<br>This release fixes CVE-2026-3838 , a path-traversal command execution vulnerability in the WebGUI's update.php. If you're running 7.3.1 or earlier, update now.<br>Beyond that, 7.3.2 includes base package security fixes with CVE coverage across multiple components including openssl, nginx, curl, samba, php, openssh, and more.<br>WebGUI & System<br>New: Added monitor status output for panel indication plugins that use LED and LCD state.<br>Shutdown and reboot syslog saving now creates /boot/logs before writing syslog files.<br>System Devices controller listings no longer include unrelated devices in affected cases.<br>Internal Boot with Flash Licensing better handles transient USB license device resets.<br>Docker<br>Docker has been updated to 29.5.3.<br>A fix ensures Docker VLAN auto-networks can fall back to the configured Docker gateway, so containers keep outbound connectivity in affected setups.<br>Docker tab load performance has also been improved by keeping synchronous I/O off the render path — a community contribution from TSpader. Thank you!<br>Storage<br>Several boot pool and storage fixes in this release:<br>Boot pool replacement no longer leaves a stale missing mirror member in affected cases.<br>Removing a boot pool device no longer triggers a regression that could fail the operation.<br>Formatting a pool device whose name overlaps with a boot device no longer triggers a false-positive invalid-target assertion.<br>Dashboard cache pool size and usage reporting is corrected for Btrfs RAID1 pools.

Unraid Summer Sale

Happening now through July 19! Save up to 50% off licenses.

Save Now

Networking & Hardware<br>Avahi/mDNS can start the daemon again after transient network loss.<br>Intel GPU PCI speed reporting is corrected.<br>Intel iGPU SR-IOV controls are shown only when the supporting plugin is installed.<br>Virtualization<br>VM CPU usage no longer reports high usage caused by unrelated host tasks.<br>VM context menu positioning is corrected.<br>VM Network Source dropdown entries are sorted and the control is wider for easier scanning.<br>Removed an obsolete VM reboot banner message when VM PCI options are enabled.<br>Linux Kernel<br>The Linux kernel has been upgraded to 6.18.38-Unraid . This release also sets CONFIG_USB_AUTOSUSPEND_DELAY=-1.<br>Unraid API<br>Updated to dynamix.unraid.net 4.35.1 .<br>Base Distro Updates<br>Added Packages (3)<br>libcbor 0.14.0<br>libfido2 1.17.0<br>libmaxminddb 1.13.3<br>Updated Packages (73)<br>Major security-relevant updates include:<br>openssl 3.5.6-2 → 3.5.7 — 12 CVEs (CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45447, and 8 NVD CVEs)<br>nginx 1.30.1-1 → 1.30.3-1 — 3 CVEs (CVE-2026-9256, CVE-2026-42055, CVE-2026-48142)<br>docker: version 29.5.2 → 29.5.3<br>curl 8.20.0 → 8.21.0 — 5 CVEs (CVE-2026-9079, CVE-2026-9080, CVE-2026-9545, CVE-2026-9546, CVE-2026-9547)<br>samba 4.22.10-1 → 4.22.10-2 — 6 CVEs (CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480)<br>php 8.4.21-1 → 8.4.23-1 — CVE-2026-14355<br>dnsmasq 2.92rel2 → 2.93 — CVE-2026-2291<br>sqlite 3.53.1 → 3.53.3 — 2 CVEs<br>net-tools — CVE-2025-46836<br>Other notable updates: bash 5.3.015, bind 9.20.24, docker 29.5.3, git 2.55.0, mesa 26.1.4, qemu 10.2.3, zfs 2.4.3, and 50+ additional packages. A full list is available in the release notes.

Ready to Upgrade?

7.3.2 Release Links

Release Notes

7.3.2 Forum Thread

Discord Discussion

7.3.2 Bug Reports

Try before you buy

Not sure if Unraid is right for you? Take Unraid for a test drive for 30 days—no credit card required.

Free Trial

Pricing

With affordable options starting at just $49, we have a license for everyone.

Buy Now