SFTPPlus MFT Release 5.26.5

SFTPPlus MFT version 5.26.5 is now available as a maintenance release for the version 5 series. It includes security updates and fixes for AS2 transfers, service startup, TLS diagnostics, and Web Manager readability.

Security updates ​

The embedded Python runtime has been updated from 3.12.13 to 3.12.16. The bundled Mozilla root certificate authority (CA) list no longer includes emSign ECC Root CA - G3 following the compromise of intermediate CA keys. This change applies to client-side HTTPS connections that use the bundled CA list.

Transfer and service fixes ​

AS2 uploads no longer fail with Context was already finalized when a transfer pauses and resumes. AS2 Message Disposition Notification (MDN) validation also accepts double quotes around Message Integrity Check (MIC) algorithm names, improving compatibility with partners that return this format.

Services release their listening ports when startup fails, allowing them to restart after the configuration is corrected. TLS events now identify when a peer rejects the server certificate or its signer, making the failure easier to diagnose.

The Web Manager wraps long names and values in tables and on the review page so they remain readable.

Customers can contact support to request a download link. To evaluate SFTPPlus MFT, request a trial.

For the complete list of changes, see the 5.26.5 release notes.