Splashtop Gateway v3.42.3 is now officially available for download.
For users need to perform an upgrade install, please refer to this upgrade guide.
This update is a maintenance release that includes:
- Java Runtime (JRE): Updated to Amazon Corretto 8.512.09.1 to distrust the compromised eMudhra CA certificates (CVE-2026-91403, CVE-2026-114820) and apply the October 2026 Java security updates.
- PostgreSQL: Updated to v16.15 to address multiple security vulnerabilities, including CVE-2026-14664 and CVE-2026-19385.
- Session recording playback: Updated Node.js to v24.22.1 to address CVE-2026-111497 (Node2Shell).
- Security enhancements.
Download:
SHA-1: be99a255016fcaa28cf6a3aa35689b6b95a5dbc4 MD5: c9e75a146cf8363e425126445441bb67
What's New:
- Supported direct upgrade to Gateway v3.42.3 from v3.36.x, v3.38.x, v3.40.x and v3.42.x.
- Supported HTTP/S and Port Forwarding — securely publish internal web applications (HTTP/HTTPS) and port forwarding services (SSH, RDP, VNC, SMB, FTP, email, databases, and custom ports) to authorized remote users via Splashtop Connector, without the need for a VPN.*
- Supported Endpoint Policy — centrally manage Streamer settings by platform (Windows, Mac, and Android), with policy inheritance and per-computer overrides.
- Supported Redirect Camera Input — redirect the app-side camera into a remote Windows session as a "Splashtop Remote Camera Input" virtual camera, selectable by any third-party app (Teams, Zoom, OBS, and more).
- Supported No Credentials Auth Mode for background actions — let 2FA-verified users perform File Transfer, Remote Command, and System Tools without re-entering OS credentials.*
- Improved time filters for logs — retrieve and export historical records from any time period with custom date range filters on History Logs, Management Logs, 1-to-Many Actions Logs, and Email Logs.
- Improved Client apps settings synchronization — team, policy, and account changes now reach online Client apps within seconds, so settings such as session recording and saved credentials take effect right away with no re-login required.
- Improved Preference Policy security items — "Require Windows or Mac login" and "Request permission to connect" are now managed through license control, with two-step verification required to modify them.*
- Bundled endpoints software v3.8.4.x Suites (compatible with Gateway v3.36.x or higher.)
- Compatible with Splashtop Connector v1.3.0.0.
- iOS and Android endpoints available in App Store.
- Security enhancements.
- Various bug fixes.
- Available in German, French, Italian, Spanish, Portuguese, Japanese, Korean, Traditional Chinese and Simplified Chinese.
* Based on your license privileges.
Upgrade Versioning:
-
Gateway
- Gateway versions lower than v3.36.x do not support direct upgrade to v3.42.x
- If your Splashtop Gateway is lower than v3.36.x, please refer to the upgrade best practice guide.
-
Endpoints software
- After upgrading to Splashtop Gateway v3.42.0, the Gateway's bundled On-Prem app/Streamer packages are updated to v3.8.4.x, replacing all earlier bundled versions.
- This ensures all future downloads and upgrades use the latest software. Existing endpoint installations are not impacted and will remain on their current versions until you choose to upgrade them.
For example, after an upgrade of Gateway from v3.40.x to v3.42.x, the v3.8.0.x bundled in the Gateway will be replaced by v3.8.4.x.
Below are the default endpoints version pre-packaged in the last 5 major releases of Splashtop Gateway.
Gateway v3.32.x -> Default Endpoints v3.7.2.x
Gateway v3.36.x -> Default Endpoints v3.7.4.x
Gateway v3.38.x -> Default Endpoints v3.7.4.x (with some endpoints default to v3.7.4.7/8 to support new features)
Gateway v3.40.x -> Default Endpoints v3.8.0.x
Gateway v3.42.x -> Default Endpoints v3.8.4.x