Upgrading to this release will not require a reboot if the system is running on 5.4.x version branch. Reboot is required when upgrading from 5.3.2 and older versions.

This release fixes a critical security vulnerability. We strongly recommend upgrading as soon as possible.

Introduction

This is a security and maintenance release. It fixes a critical vulnerability in a web server component, stops trusting certificates issued by a compromised certificate authority, and resolves an issue affecting the connection to Syneto Central during the change from summer to winter time.

Resolved Issues

Security

• Fixed a critical vulnerability in PHP (CVE-2026-109618, CVE-2026-109619, also known as “PHP2Shell”) that allowed unauthenticated remote code execution. PHP has been updated to a patched build (7.4.33-31).
• Certificates issued by the compromised eMudhra intermediate certificate authorities are no longer trusted (CVE-2026-114406).

Platform Reliability

• Fixed an issue that caused the service connecting the appliance to Syneto Central to stop responding when clocks changed from summer to winter time.
• The service connecting the appliance to Syneto Central now restarts automatically if it stops responding.

Ongoing Improvements and Future Releases

SynetoOS 5.4.5 marks another step forward in our ongoing journey of innovation and improvement. Your feedback plays a crucial role in helping us deliver a reliable and high-performing operating system. We invite you to explore the latest release, discover what’s new, and share your insights, so we can continue shaping SynetoOS to bring you the greatest possible value.