ANTlabs

    ASP 2.0 Update #9
    Release Date: 23 October 2026

    ASP 2.9.3

    Security Fixes

    • Resolved critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109169.

    ASP 2.9.2

    Enhancements and Changes

    • Added static time-zone support for America/Winnipeg, America/Vancouver, and America/Edmonton, allowing these time zones to operate without Daylight Saving Time (DST) adjustments.
    • Improved database data retention and cleanup mechanisms.
    • Improved the captive portal consent flow and layout to ensure users review and accept the required consent before connecting.
    • Added search functionality to the site selection interface used for Duplicate Backup, making it easier to locate sites in environments with large numbers of sites.
    • Fixed an issue where report downloads under Global Account could remain stuck in the GUI.
    • Added a new Access Code Usage Report to provide usage information for access codes.
    • Enhanced ASP Site Management by allowing the Site Description field to be resized, making longer descriptions easier to view and edit.
    • Enhanced Global Plans to support configuration of the device sharing limit across all supported plan types.

    Bug Fixes

    • Fixed an issue in PMS authentication configuration that prevented added non-VIP plans from being removed.
    • Fixed an issue affecting the responsiveness of Social Login buttons on the Captive Portal.
    • Fixed an issue in the RMS Cloud REST API PMS integration where VIP authentication could return a “Guest Not Found” error when authenticating using the guest’s last name.
    • Fixed an issue in ASP Admin Site Management where the site address could be displayed incorrectly or be missing from the Home Page.
    • Fixed an issue affecting scheduled report generation and transfer for some organizations.
    • Fixed an issue where repeatedly selecting Send Email on the Captive Portal could result in multiple OTP emails being sent.
    • Fixed failures affecting Transaction Report downloads.
    • Improved Global Account search accuracy so that searches using an exact User ID do not return unrelated results.
    • Fixed failures affecting Session Report downloads.
    • Updated the ASP Transaction page so that an unavailable Billing ID is displayed as an empty value instead of “0”.
    • Improved the non-VIP plan upgrade confirmation popup by providing clearer Yes and No action buttons.
    • Fixed a time discrepancy between information displayed in the ASP GUI and downloaded reports.
    • Fixed an ASP permission issue where restricted Delete Expired Global Account and Delete Expired Global Code options could remain visible in the GUI.
    • Fixed an issue where an incorrect session end time could be displayed in the Session Report
    • Fixed an issue where attempting to edit a non-existent Global Plan returned a 500 Internal Server Error instead of a 404 Not Found response.
    • Improved site deletion processing by handling delete operations asynchronously, reducing the possibility of Gateway Timeout errors when deleting sites.
    • Improved the responsiveness of report and diagnostic pages by preventing administrative sessions from being locked during long-running requests.
    • Fixed an issue where the name and email address of users authenticated through social media were not displayed in User Details.

    Security Fixes

    • Updated OpenSSH components to address the following security vulnerabilities;
      •  CVE-2025-32728
      • CVE-2025-61984
      • CVE-2025-61985
      • CVE-2026-35414
      • CVE-2026-35386
      • CVE-2026-35385
      • CVE-2026-35387
      • CVE-2026-35388

    ASP 2.9.1

    Bug Fixes

    • Fixed an issue where the header row was missing from the downloaded monthly license usage report.
    • Fixed an issue where checking the casting report resulted in a 500 Internal Server Error.
    • Fixed an issue where the Org Super Admin could not see a newly created site.
    • Fixed a “404 Not Found” error when downloading reports from Report & Analytics > Downloads.
    • Fixed an issue where the Terms and Conditions consent popup did not support scrolling for long content.

    APIs

    • Fixed an issue where the Org Super Admin could not see a newly created site.

    ASP 2.9.0

    Enhancements and Changes

    • Added terminal access to the cast server, enabling access from the ASP GUI.
    • Added an option in the GUI to end guest sessions from the server side.
    • Added a timezone field to the organization add and edit form.
    • Added a new menu switcher in the ASP GUI to navigate between different hospitality services.
    • Added a description field in the site list, allowing users to add notes for each site.

    Bug Fixes

    • Fixed an issue where the TruAuth Report service would repeatedly restart due to an internal error.
    • Fixed an issue causing duplicate OTP emails to be sent.
    • Fixed an issue where the client logo was not displayed in OTP emails.
    • Fixed an issue where the built-in portal background image did not display after uploading a new image.
    • Fixed an issue where the location portal welcome page banner could not be disabled or removed once enabled.
    • Fixed an issue preventing custom landing page configuration when HTTPS was enabled, which caused portal save failures.
    • Fixed an issue where background images and icons uploaded for TV display were not taking effect.

    APIs

    • Introduced new APIs to manage VLANs, including creating, updating, deleting, and retrieving single or multiple VLANs.
    • Added new APIs to manage plans, allowing users to create, update, delete, and retrieve individual or all plans.
    • Added new APIs to duplicate and delete locations.
    • Added a new API to duplicate a site and check duplication status.
    • Added a new API to update room devices.
    • Enhanced the API for retrieving all portals to include additional output fields for site name and zone.
    • Added a timezone field in the Organization Add, Update, Get, and Get All APIs.