IceWarp EPOS 3 Server – Release Notes (Version 14.3.0.12)

IceWarp EPOS Server – Release Notes

Version 14.3.0.12 | September 23, 2026

This release focuses on stability, performance, and a few core IceWarp Server improvements, highlighted below.

Several fixes address issues reported in production environments, including corrupted diacritics in attachments, access to password-protected attachments and sent emails remaining in Drafts.

Administrator Impact Summary

New Features

• none

Improvements & Optimizations

• WEBCLIENT - Reviewed the issue where inviting a new user led to a session invalid error during username validation on the login screen.
• WEBCLIENT - Reviewed the SQL injection vulnerability in the API related to inbox email filtering that allows attackers to manipulate queries.
• SERVER - Reviewed the missing body content in the limit notification email.

Fixed Issues

• WEBCLIENT - Fixed the issue preventing users from opening and viewing emails in the Snoozed folder.
• WEBCLIENT - Fixed the issue where users could not access password-protected attachments in the WebClient.
• WEBCLIENT - Fixed the issue where tags were not displayed in emails opened from search folders.
• WEBCLIENT - Fixed the issue where disabling the setting to open documents still resulted in them attempting to open instead of downloading.
• WEBCLIENT - Fixed the issue where the first email sent from a newly configured WebClient account remained in Drafts instead of appearing in Sent Items.
• WEBCLIENT - Fixed the broken troubleshooting link that caused an error when generated.
• WEBADMIN - Fixed an error that prevented saving account permissions in the WebAdmin interface.
• SERVER - Fixed the issue where creating a subfolder under a default gateway folder resulted in an error indicating that the parent mailbox did not exist.
• SERVER - Fixed the issue of corrupted diacritics in downloaded attachments zip file.
• SERVER - Fixed the issue of incoming emails being stuck in the SMTP temp folder by restarting the module.

Security Updates

• WEBCLIENT - Reviewed the SQL injection vulnerability in the API related to inbox email filtering that allows attackers to manipulate queries.

Breaking Changes & Deprecations

• none

Upgrade Notes

• Downtime required: Yes (service restart required)
• Estimated downtime: Up to 15 minutes when upgrading from 14.2.X
• Backup recommendation: Full configuration and data backup before upgrade
• Rollback supported: No

Compatibility & Configuration Notes

• No changes to default configuration values.
• Fully compatible with existing LDAP and Active Directory integrations.
• No changes to supported browsers for WebClient.

Supported systems

• Windows Server (2016 or newer) and Linux (RHEL 8/9, Rocky Linux 8/9, CentOS Stream 9)
• Outlook Sync (14.1 or newer)
• IceWarp Desktop Client (10.0 or newer)
• IceWarp FileSync (14.1 or newer)
• IceWarp mobile app (5.0 or newer) and Authenticator (1.1 or newer)

Support & Feedback

If you experience any issues after upgrading, contact IceWarp Support and reference IceWarp Server 14.3.0.12. Please include the server version, operating system, database type and version and relevant logs when opening a support case.