Note:
Package name: 19.SG5000_base-sys-hotfix-20261103-01.pkg
MD5 checksum: 81525232096d3916eb9d657734f43106
File size: 449 KB
Release date: 3 November 2026
Publication Date: 04 November 2026
Dear Customer,
CVE-2026-98432 is a security vulnerability identified in the Linux kernel, involving a use-after-free condition in IPv4 TCP processing. This is a broader Linux ecosystem security concern that is not limited to any particular vendor, product, or organization. It may affect systems and platforms worldwide running vulnerable Linux kernel versions. Under certain conditions, successful exploitation could potentially compromise the confidentiality, integrity, and availability of affected systems.
ANTlabs is aware of CVE-2026-98432. We take this matter seriously and have promptly evaluated the potential impact on our products, prioritizing the development and release of the necessary security updates.
SG5
The updates apply to the following product:
Tru’IP
Recommended Customer Action
Please take immediate action to schedule and apply the applicable security update
If you require assistance or need further clarification, please contact ANTlabs Technical Support.
24-hour hotline: +65 6100-7877
US customers: +1-904-430-8477
Email: tech-support@antlabs.com
Note:
Package name: 18.SG5000_base-sys-hotfix-20261022-01.pkg
MD5 checksum: 118a76479706cf891cecf7c405e21f81
File size: 29 MB
Release date: 22 October 2026
Publication Date: 22 October 2026
Last Updated: 3 November 2026
Dear Customer,
ANTlabs is aware of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. We take this matter seriously and have promptly evaluated the potential impact on our products, prioritising the development and release of the necessary security updates.
Security Remediation Schedule
SG5
The updates apply to the following product:
ASP
ANTlabsEzCast
ACG
TruAuth
TruIP
Recommended Customer Action
Please take immediate action to schedule and apply the applicable security update
Please retain and refer to this advisory for the latest release schedule. We will update this advisory as new information and security updates become available.
If you have any questions, require clarification, or need assistance, please contact ANTlabs Technical Support:
24-hour hotline: +65 6100-7877
US customers: +1-904-430-8477
Email: tech-support@antlabs.com
Private 5G is transforming enterprise connectivity. From campuses and hotels to industrial facilities and distributed operational sites, Mobile Private Networks (MPNs) give organisations greater control over mobile coverage, performance and traffic separation. Network slicing further enables operators to tailor connectivity to different enterprise and application requirements.
For customers handling sensitive business information, that connectivity foundation raises an important question: Does an authorised mobile connection also mean the person accessing an enterprise portal is authorised to use it?
The answer depends on how closely mobile-network identity and enterprise access controls work together.
ANTlabs helps close this identity gap by connecting private mobile-session context with enterprise Identity and Access Management (IAM). This enables access decisions to consider both the connection and the user, supporting a more complete security architecture from mobile access through to enterprise applications.
Private 5G provides important security capabilities. SIM or eSIM authentication establishes the validity of a mobile subscription, while private APNs, DNNs and network slices can support enterprise-specific routing, traffic separation and service policies.
However, these capabilities serve different purposes from enterprise user authentication and application authorisation.
A valid subscription does not, by itself, establish which employee is currently using a device. Membership of an enterprise network slice does not determine whether that person should access payroll records, financial systems or an administrative portal.
Where mobile-network and enterprise identity systems operate independently, several gaps can remain:
These are integration gaps that enterprises should assess in their deployment. Their significance depends on the controls already in place.
The underlying Zero Trust Principle is clear: network location alone should not establish trust in a user or device. Access must be evaluated against identity and policy.
ANTlabs provides the identity-mapping and policy-enablement layer between the mobile network and the enterprise security environment.
Depending on the deployment and available interfaces, mobile-network context can include the SIM’s subscriber identifier, device information such as the IMEI, and the IP address associated with the active session. ANTlabs correlates this context with the relevant enterprise user or group.
Enterprise IAM supplies the complementary information: the user’s account, role, group membership and access permissions.
Bringing these contexts together allows the security architecture to evaluate whether the mobile session and the identity presented at login are consistent with the enterprise’s authorized mappings. ANTlabs enables that context to inform the access decision, while integrated enterprise controls enforce the appropriate policy. Learn more about Private 5G
A successful identity match is one input to that decision. Application permissions, authentication requirements, device posture and other configured conditions still apply.
Consider an employee whose private 5G subscription is associated with their enterprise account. The employee connects through an authorised mobile session and attempts to access a sensitive finance portal. If the login corresponds to the authorized session-to-user mapping, the enterprise can evaluate the request against that employee’s role and the portal’s security requirements.
Now consider the same connection presenting a different employee’s finance credentials. Without correlation between the two identity systems, the mobile network and the application could each accept their respective credentials without recognising the inconsistency.
With an explicit identity-consistency policy and integrated enforcement, the mismatch can trigger a block and an alert before access is granted. This adds a valuable check against mistaken identity and credential misuse. For shared devices or pooled subscriptions, the organization must define the permitted user relationships and authentication requirements. A subscription identifier is useful security context; it is not proof of the person holding the device.
An end-to-end private 5G security architecture needs coordinated protection across connectivity, identity, applications and data. The mobile network provides controlled connectivity and traffic separation. Enterprise IAM establishes user identity and permissions. Security enforcement platforms apply access decisions. Encryption protects data in transit, while endpoint and application controls address risks at either end of the connection.
ANTlabs adds the connection between mobile-session context and enterprise access policy, helping these components operate as a complete solution using their Tru’Auth platform.
This distinction matters for customers evaluating private 5G. A private network or network slice does not automatically provide end-to-end application encryption or prevent every form of unauthorised access. Those outcomes depend on the design and configuration of the complete environment.
By integrating mobile identity into the enterprise security architecture, ANTlabs helps customers strengthen the access path to sensitive resources while retaining the controls needed to protect the data itself.
Most enterprises already maintain IAM, firewall, Secure Access Service Edge (SASE), Network Access Control (NAC) and application-security platforms.
ANTlabs enables private mobile sessions to participate in that established policy environment. Subject to supported integrations, the correlated user and session context can inform application access, filtering and traffic-management policies.
For customers, this creates practical benefits:
A university can distinguish students, faculty and administrative staff using shared mobile infrastructure. A hospitality group can separate employee and contractor access across properties. Industrial and automotive organisations can restrict operational personnel to the applications required for their work.
In each case, connectivity supports mobility while enterprise identity governs access.
For mobile operators, this integration expands the value of MPN and network-slicing services.
Alongside coverage, performance and Quality of Service, operators can offer enterprise identity integration and ZTNA policy enablement as part of a managed security proposition. This creates a path towards Security as a Service (SECaaS), with connectivity and enterprise access requirements addressed within the same service design.
Multi-enterprise deployments can preserve each customer’s identity mappings and policy boundaries while using a shared service platform. Clear separation between customers and well-defined integration responsibilities remain essential.
The result is a service proposition that addresses a business priority: helping the right people reach the right resources through an appropriately controlled mobile connection.
Private 5G gives enterprises a powerful foundation for mobile operations. A complete security approach connects that foundation to the identities, permissions and controls protecting the organisation’s applications and data.
ANTlabs Private 5G ZTNA helps make that connection. By correlating mobile-network context with enterprise IAM, ANTlabs enables more informed access decisions and helps prevent identity mismatches from becoming unauthorised access to sensitive enterprise portals.
For enterprises, this supports a more complete approach to private data security. For operators, it creates a stronger offering around secure, identity-aware private 5G services.
Build your private 5G service around connectivity, identity and enterprise protection. Talk to the ANTlabs solutions team about your MPN, network-slicing and ZTNA requirements.
Talk to our team about building your scalable hospitality platform today.
Note:
This update includes the following enhancements:
This update contains the following fixes:
Package name: 17.SG5000_base-sys-bulk08-20260430-01.pkg
MD5 checksum: 863e7a23d96315c400ae62bd7736d8b3 (updated 21 Sep)
File size: 130 MB
Release date: 2 July 2026