Reversing Center
Дистанционный центр по исследованию защитного ПО.

6.1.2.42921

Video Management System

PUBLISHED 20 May 2026

Release Notes

IMPORTANT:

  • These release notes cover changes implemented since the latest major release (6.1.1.42471).

BREAKING CHANGES:

  • Support for MacOS 12 will be discontinued in the next major release (6.2).
  • Security hardening: Access-Control-Allow-Credentials is now false. Browser integrations using cookie-based authentication on cross-origin requests (including fetch with credentials: 'include', XHR.withCredentials = true and Axios requests with withCredentials: true) will stop working and must migrate to Authorization: Bearer <token>.

NEW DEVICES / OPERATING SYSTEMS SUPPORT:

  • Raspberry Pi OS 13 (Trixie)

SECURITY UPDATES:

  • Security hardening: Access-Control-Allow-Credentials is now false. Browser integrations using cookie-based authentication on cross-origin requests (including fetch with credentials: 'include', XHR.withCredentials = true and Axios requests with withCredentials: true) will stop working and must migrate to Authorization: Bearer <token>.
  • Server now sends HSTS headers during the HTTP → HTTPS redirections. As a result, the initial connection is no longer vulnerable to SSL stripping and MITM attacks.

GENERAL IMPROVEMENTS:

  • Server Monitoring graph colors improved.
  • VCA edge build size is optimized - debug symbols are removed.
  • Localization has been improved.
    Timeline date format id consistent with OS date format.
  • It is now possible to download full health report at the “Advanced > Logs Management” page.

ENTERPRISE FUNCTIONALITY IMPROVEMENTS / FIXES:

  • Fixed the issue with reporting Live Streaming service usage.

ANALYTICS IMPROVEMENTS / FIXES:

  • Added Intrusion Detection events support on Milesight cameras.
  • Metadata parsing (object attributes) is added for the Vivotek analytics plugin.
  • After upgrading to 6.1, if trying to choose a Vehicle type in the Milesight plugin search box, it searched for bikes. Fixed.
  • On Hikvision cameras, wrong previews of analytic objects (Vehicle or LPR) were shown on the right panel in the Desktop Client. Fixed.
  • The Vivotek analytics plugin could initiate a large number of false-positive error notifications. Fixed.
  • The analytic event/object from the Vivotek SD9384-EHL could stop appearing in the Desktop Client after some time. Fixed.
  • Dahua analytics plugin did not load for autodiscovered devices (i.e. DH-SD22204UE-GN). Fixed.
  • The built-in Milesight analytics could shows unexpected "Unknown" objects. Fixed.
  • The analytics database could completely fill the storage after upgrading to v6.1. Fixed.

DEVICE SUPPORT AND FIXES:

  • Hanwha Devices:
    • On Hanwha Profile G cameras (i.e. XND-9083RV), imported archives could have missing periods after network disconnection. Fixed.
  • Devices Specific Fixes:
    • I/O monitoring was enabled on Axis devices after initialization even if it was not enabled in the Desktop Client. Fixed.
    • The secondary stream was not available on Dahua DH-IPC-HDBW2441* camera models after upgrading to 6.1. Fixed.
    • Dahua DH-IPC-HFW366* camera models now support 2-way audio.
    • Fixed PTZ on Hikvision DS-2DP3236ZIXS-D/440.
    • If Hikvision cameras were not connected to the Internet, the time stamps of thermal events could differ. Now, the system time is used.
    • After upgrading to v6.1, some Hikvision cameras (i.e. DS-2CD2*) could become unauthorized. Fixed.
    • After upgrading to 6.1, Server could unexpectedly change streams configuration on HikVision DS-2TD2617* camera models after Server reboot. Fixed.
    • Incorrect camera firmware version was displayed for Hikvision DS-2CD2743G2* model line with firmwares 5.7.19+. Fixed.
    • On Milesight devices, audio alarm can be enabled even if audio input was disabled in the camera settings. Fixed.
    • Files exported from some Arecont Vision panoramic cameras, could not be played back. Fixed.
    • Fixed PTZ on Hikmicro HM-TX3840-10*
  • Newly Supported Devices:
    • Advantech ADAM-6250
  • Encoders added to the analog list:
    • Hikvision DS-7632* series, DS-9032HUHI-K8.
    • Avycon AVR-NSV64E2N, AVR-NSV32P16
  • Multisensor Cameras:
    • Hikvision DS-2SE4C425MWG* and DS-2CD2346G3D* series
    • Hikmicro HM-TD1228*, HM-TX3840-10* and HM-TD2628* series
    • Axis Q6300
    • IVSEC NC542ADX
    • Dahua DH-IPC-HDBW2449F
    • Pelco SMLE1-24V5* and SMLE1-32V5* series
    • Panasonic wv-s8530
    • Invid VIS-P4DUALDRIR28NH* series
    • Digital Watchdog DWC-XMDS20Mi, DWC-XMDF32H, DWC-XDBJ10Mi, DWC-XTBG05DiT
      Safire Smart SF-IPTB640A*, SF-IPTB384A*, SF-IPTB256A* series
  • Advanced PTZ:
    • Sparsh SS-IND212* series
    • Pelco ESCE1-2X40* series

BUG FIXES:

  • General UI Fixes:
    • The "Floor/table" mount option in the dewarping settings was not visible by default. Fixed.
    • Some entries could appear in the Audit Log as actions with no user account specified. Fixed.
    • In 6.1, we made a change that saved the playback speed when clicking play-pause. After complaints from users, we revert back this change: as soon as the video is paused, the playback speed will be reset. There will be the option to change this behavior.
    • "Do HTTP(s) Request" rules with whitespaces in the URL did not work in 6.1+. Fixed.
    • Fixed scrolling issues with events in the notification panel.
    • In multi-Server environments, multiple "Unsuccessful login" entries appeared in Audit Trail when trying to open bookmarks from a device where the archive was spreaded across different Servers. Fixed.
    • In big systems, recording and device statuses may be displayed incorrectly after upgrading to v6.1. Fixed.
    • Fixed the Desktop Client crash that could occur when browsing the timeline with 4x4 or 5x5 layouts opened.
    • On some Sites, users failed to authenticate via temporary links and were prompted to authenticate through Cloud instead. Fixed.
    • Fixed the scaling issue when many Server monitoring items were opened on the layout.
    • In multi-monitor environments, if multiple instances were opened on specific monitors, the configuration was not restored after restart. Fixed.
    • The default user groups (Administrators and Power Users) were also selected as recipients in the Send Mail action even if only one email address was specified. Fixed.
    • The Desktop Client did not restore state for the "Bookmarks" and "Events" tabs after restart. Fixed.
    • In certain environments, the Desktop Client could show an empty timeline portion past the certain date. Fixed.
    • The role description in Group Details was not fully visible without scrolling. Fixed.
    • In the User Management > Resources dialog, group-level selection in search did not work consistently. Fixed.
    • Bookmarks sometimes could start playing a few seconds earlier than their start time. Fixed.
    • Fixed the Desktop Client crash when dragging a cloud layout onto a video wall.
    • Multi Video export to .nov format could freeze if a decent amount of time (few hours) was exported. Fixed.
    • The "Available by Permissions" setting in the Resources tab for a new group/user could be reset. Fixed.
    • The Desktop Client lost connection to Cloud and required to authenticate again if connecting to a different Server version. Fixed.
    • Fixed a visual rendering bug that caused the system tray icon context menu to display unreadable characters on Windows 10 Enterprise 2016 LTSB (build 1607), introduced in version 6.1.0.
  • Server Fixes:
    • Media2 requests were sent to devices even if the "Use Media2 to fetch profiles" advanced option was set to "Never". Fixed.
    • Devices were shown as unauthorized after password reset, even if the password was correct until it was changed back to the original one on both sides (device and VMS) or remove and re-add the device with the new password. Fixed.
    • Motion & Events Panels could scroll down on its own after idling for a while. Fixed.
    • In some cases, it was not possible to merge a Server with the Site with a custom certificate installed. Fixed.
    • Emails initiated by a Server were missing URL to the recordings in the plain-text body. Fixed.
    • Server crashed after a WebRTC camera was created, started streaming live, and then stopped live stream. Fixed.
    • If a user’s OU was changed in the LDAP server, Server treated this user as a new one, and a new user entry was created after the LDAP sync (with the duplicated user name). Fixed.
    • When adding RTSP streams, Server did not check all supported authentication algorithms. Fixed.

API / SDK FIXES:

  • Fixed the streaming issues via vmsproxy (https://${relay}.vmsproxy.com/rest/v3/devices/{$device_id}/media.mp4) using FFplay.
  • When trying to perform an export using the /rest/v3/devices/ method with the continuousTimestamps parameter specified, utcTimestamps were ignored. Fixed.
  • REST API: rest/v4/events/log changed its eventsOnly parameter behavior.
  • API responses containing GUIDs, are changed in V4 - there will be no {} symbols:
    • In v3 or earlier - “{%guid_string%}”
    • In v4 - “%guid_string%”
  • Fixed a wrong response from rest/v4/servers/this/storages with ETag.
  • Timezone ID and offset information is added to the exported media file metadata when export is performed via the /rest/v3/devices/ method.
  • The readonly field prolonged is added to rest/v4-/events/rules to evaluate triggers by rules only.
  • WebRTC: metadata packets are now being dropped when the channel capacity is insufficient.
  • WebRTC: Websocket connection failed after a live stream was restarted. Fixed.
  • Plugin Analytics SDK: utilitiProvider()->cloudToken() did not return the token. Fixed.
  • Added advanced PTZ functions that were missing in the in v4 Rest API comparison to legacy /api/ptz: ContinuousFocusPtzCommand , AbsoluteLogicalMovePtzCommand, relative pan/tilt/zoom/focus/rotation capability bits, ViewportPtzCapability, FlipPtzCapability, HomePtzCapability, AuxiliaryPtzCapability.
  • Server responded with "Not found" to unauthorized JSONRPC requests instead of "Unathorized". Fixed.
  • GET /rest/v4/devices required {} when using the _filter option (i.e. /rest/v4/devices?serverId={ced42fd2-d6ee-c192-8ddc-a0f820b71e24}). Now, they are optional.

6.1.1.42624

Video Management System

PUBLISHED 11 Mar 2026

Release Notes

IMPORTANT:

  • These release notes cover changes implemented since the latest major release (6.1.0.42176).

BREAKING CHANGES:

  • Support for MacOS 12 will be discontinued in the next major release (6.2)..

NEW DEVICES / OPERATING SYSTEMS SUPPORT:

  • Mac OS Tahoe
  • Raspbian 13
  • Milesight Edge

NEW FEATURES

GENERAL IMPROVEMENTS:

  • JWT Tokens are fully supported to improve authentication performance and avoid accidental logouts from Cloud connected Sites.
  • Danish localization added.
  • The in-Client Remote Administration Tool is improved.
  • Improved the Desktop Client stability on Windows 11.
  • The window size limitation is eliminated when using the --window-geometry CLI parameter to run the Desktop Client.
  • The --hide-panels CLI parameter is added to launch the Desktop Client with all side panels hidden.
  • The “Reset to defaults” Web Admin dialog is improved. Added the information that the activated licenses will remain on Server after a reset.

ENTERPRISE FUNCTIONALITY IMPROVEMENTS / FIXES:

  • Sites could show up Unreachable in the Desktop Client. Fixed.

ANALYTICS IMPROVEMENTS / FIXES:

  • Only the first object was detected on Dahua ITC413-PW4D-IZ1. Fixed.
  • Objects detected on Hikvision iDS-2CD7146G0-IZS did not trigger actions. Fixed.
  • Analytic events (IVA) did not work on Bosch cameras. Fixed.
  • Analytics event attributes info was missing in the Event Log description. Fixed.
  • Analytic Events were not triggered if the rules of the event was configured under the group level. Fixed.

DEVICE SUPPORT AND FIXES:

  • Devices Specific Fixes:
    • Fixed RTP issues on the URMET 1099/501B camera.
    • Live stream from AXIS F9114 could not load. Fixed.
    • Initialization is improved for MERIT-LILIN cameras.
    • Alarm input events are supported on Hikvision DS-2CD2123G2x, DS-2CD3687G3x and Hikvision DS-2DE3C210IXx.
    • Osiris OS-I3-EENSW8Mx are detected as Dahua devices.
    • Input signals from FLIR were handled for 10-30 seconds. Fixed.
  • Newly Supported Devices:
    • Elmo NEXIBF07T, NEXIMF02
  • Encoders added to the analog list:
    • Speco n32nrn, n16nrx
  • Multisensor Cameras:
    • Vivotek TT9333
    • HIKVISION iDS-2CD8A46G2-XZHSY
  • Advanced PTZ:
    • TBA

6.1.0.42176

PUBLISHED 01 Dec 2025

Release Notes

SUMMARY:

  • Release Notes show changes relative to the latest official Beta (6.0.6.41837).

BREAKING CHANGES:

  • Support for Ubuntu 18.04 is discontinued.
  • Support for MacOS 11 is discontinued.
  • Support for Raspberry OS 10 is discontinued.
  • Support for MacOS 12 will be discontinued in the next major release (6.2).

TERM CHANGES

  • The term "System" is renamed to "Site". This change will be applied across all products (VMS, Cloud, Mobile, Connect).

NEW DEVICES / OPERATING SYSTEMS SUPPORT:

  • Raspberry Pi 5 with Raspberry Pi OS 12 (64-bit) is supported. Raspberry Pi Native camera is not fully supported yet.
  • Windows Server 2025 is now supported.

NEW FEATURES:

  • Enterprise (SaaS) - Organization users can be managed in the Desktop Client.
  • Enterprise (SaaS) users can share the links to bookmarks: select the bookmark and get the link to share, Links to bookmarks may have expiration date.
  • Enterprise (SaaS) - Re-streaming traffic between Sites. This feature allows adding streams from Sites that belong to different Organizations to be able to view and process them (i.e. grab a stream for analytic purposes, provide links for other organizations, etc).
  • New Event Rules Engine with a cleaner, more user-friendly interface:
    • Event parameters can be passed to actions when events occur (i.e. parameters of analytic objects, date/time of the event occurred, information about the devices triggered etc). Such parameters can be dynamic. This will allow displaying additional information when triggering actions such as: notifications, HTTP requests etc.
    • Lists are introduced (action can be triggered if certain parameter values are listed or missing).
    • In the Event Rules dialog it is possible to perform a search by a trigger name to find a corresponding rule.
    • Event Rule emails are localized.
    • Bearer and Digest Authentication are added to the "Do HTTP request" action in the rules engine.
    • Custom headers can now be configured for the "Do http request".
    • The generic HTTP action now has the option to send the request back to a Server within the Site.
  • The "Shock Alarm" event is now instant instead of prolonged.
  • The Desktop Client is rendered with Direct3D on Windows OS. This will resolve different issues related to OpenGL rendering (i.e. missing / outdated / buggy OpenGL drivers, GPU switching etc).
  • The new Live View Subscription Service is introduced:
    • It allows viewing of Live streams in Enterprise / SaaS sites without interruptions.
    • Every 10 minutes, the live stream from the camera is interrupted for 30 seconds if there is not enough Live View or Recording licences or services purchased.
  • Remote Access is implemented. It will allow providing support engineers with remote access to the site servers via remote access software (SSH, RDP etc) without additional port-forwarding.
  • The separate Audio Playback permission is introduced.
  • The Desktop Client can open up web pages in a separate widget which can interact with the other parts of the Desktop Client UI: open video streams, get analytics data etc. This will improve user experience when using Maps.
  • WebRTC streams (mostly used by Android-powered cameras) can be added to Server.
  • Servers can use Intel or NVidia GPU to perform hardware decoding (for motion detection, for instance). This can be configured independently on each Server in the Server Settings dialog.

Nx Witness v6.0.5.41290​

PUBLISHED 30 Jun 2025​

More about this release https://nxvms.com/download/other/releases

Nx Witness v6.0.2.40414​

(PUBLISHED 19 Feb 2025)​

-.jpg

  • IMPORTANT:
    • These release notes cover changes implemented since the latest major release (6.0.1).
  • BREAKING CHANGES:
    • Support for Raspberry Pi 3 is discontinued.
    • Support for Ubuntu 18.04 will be discontinued in the next major release (6.1).
    • Support for MacOS 11 will be discontinued in the next major release (6.1).
    • Support for Raspberry OS 10 will be discontinued in the next major release (6.1).
  • GENERAL IMPROVEMENTS:
    • In order to get better quality of screen recordings shared with the Support team, the default resolution for Screen Recording is set to "Native".
    • The permission for rendering with hardware acceleration has changed since Ubuntu 20.04. To support that, the Server user which is created during the installation, has been granted the rendering permission.
    • The warning message when using Digest Authentication is improved.
    • The “Ctrl + Alt + S” shortcut interfered with some national characters as a keyboard shortcut to "Save Layout as..." instead of “Ctrl + Shift + S”. Now only “Ctrl + Shift + S” works.
    • Bookmark search is improved.
    • Japanese translations in Web Admin are improved.
  • ANALYTICS IMPROVEMENTS / FIXES:
    • Axis analytics improved: Object Tracking is introduced.
    • On Hikvision cameras, multiple notifications could be triggered for a single analytic object. Fixed.
    • Native best shots for non-LPR objects are supported on Hikvision cameras.
    • Axis cameras did not send LPR metadata after upgrading to 6.x. Fixed.
    • Advanced Object Search did not list all the objects available. Fixed.
  • DEVICE SUPPORT AND FIXES:
    • Devices Specific Fixes:
      • Hikvision DS-9032HUHI-K8 was displayed as a multi-sensor camera instead of NVR. Fixed.
      • Alarm input events are now supported on Hikvision DS-2TD1228x.
      • OEM camera IPC-Color4K-T-3.6mm is recognized as Dahua with all analytics capabilities.
      • Axis D4100-E could not be added. Fixed.
      • On Hikvision iDS-2CD7A46G0/P-IZHSY, bookmarks were created with wrong timestamps (one hour in the future). Fixed.
      • The stream from Reolink RLC-812A could not be displayed in the Desktop Client. Fixed.
      • Sound only devices (i.e. AXIS 1004E speaker) did not play sound after switching between layouts. Fixed.
    • Newly Supported Devices:
      • Hikvision DS-2TD1228-2/QA bi-spectrum camera.
    • Encoders added to the analog list:
      • Dahua NVR E56_NVR4COM3
      • Hikvision iDS-7204HUHI
    • Multisensor Cameras:
      • Uniview IPC28184EA-ADX5K-F40-I1, IPC3222SS-ADF28K-I1, IPC3222SS-ADF40K-I1, IPC3224SS-ADF28K-I1, IPC3224SS-ADF40K-I1, IPC68188EFW-X25-F40G-VH, IPC8544EA-KM-I1, IPC9312LFW-AF28-2X4, IPC94144SFW-X25-F40C, IPC94144SR-X25-F40C, IPC8645EA-ADZKM-I1, IPC98246EFW-X42-W-VH1, TIC2621SR-F3-4F4AC-VD, TIC2A32SA-F10-4F8AC-I1, TIC2A32SA-F3-4F4AC-I1, TIC2A32SA-F7-4F6AC-I1, TIC3612SA-F2-4F3AC-I1, TIC3612SA-F3-4F4AC-I1, TIC3612SA-F7-4F6AC-I1, TIC7626EL-GAF75-4X56-VH1
      • Axis M5000, P3735-PLE
      • Dahua DH-SDT5X425x
    • Advanced PTZ:
      • Hanwha PNM-C34404RQPZ
      • Uniview IPC6424SR-X25-VF
      • Dahua DH-SD5A432XA-HNR
  • BUG FIXES:
    • General Fixes:
      • Servers could not be updated from 5.1.5 to 6.0 on Ubuntu 18.04. Fixed.
      • The actual pre-recording time for an Event Rule could not exceed 60 seconds even if a greater value was set. Fixed.
      • If the Desktop Client has a newer version than the Server and the Server should be updated, the automatic update did not work and the system required manual upgrade. Fixed.
      • In certain network environments, Cloud merge could fail. Fixed.
      • Some Samba storage locations could not be added to the Server, with the "Invalid storage path" error. Fixed.
      • The custom "maxSceneVideoItems" parameter could not be set above 64 cameras per layout. Fixed.
    • UI Fixes:
      • Non-power users could not add shared layouts on Showreel. Fixed.
      • The Desktop Client could freeze after displaying video streams for a long time (~24 hours). Fixed.
      • The Desktop Client running on Intel HD Graphics could freeze when hovering over the Resource Tree. Fixed.
      • On some H265 MPEG-TS streams, the Desktop Client displayed a gray overlay over a video. Fixed.
      • Multi-video exported files could display "NO DATA" on some items. Fixed.
      • Calendar on the timeline was displayed incorrectly if the first day of a week in the OS settings was not Sunday. Fixed.
      • On NVidia GPU, with the hardware acceleration enabled, the image quality degraded when applying dewarping and zooming on fisheye cameras. Fixed.
      • JPG files did not open when hardware decoding was enabled. Fixed.
      • On Mac OS, a Context Menu did not show up when performing a right click on any item in the top left corner (Device Tree). Fixed.
      • Non-owner local and cloud users could periodically disconnect from System. Fixed.
      • Time positions could go out of sync between cameras on big layouts after opening an item in full-screen mode. Fixed.
      • The object search menu text displayed incorrectly on Chinese localization. Fixed.
      • IP addresses in the device list were sorted incorrectly. Fixed.
      • Texts in some menus (i.e. User Management) were displayed incorrectly if the "Roboto" font was installed in the OS. Fixed.
      • The cell aspect ratio of the Alarm layout unexpectedly changed to 16:9 when it was triggered during the Showreel mode. Fixed.
      • The "Apply" button in the "Local Settings" dialog was active even if no changes were modified. Fixed.
      • Custom permission groups in the target system could disappear after the merge. Fixed.
      • On some localizations, the LDAP dialog texts were displayed incorrectly. Fixed.
      • The Desktop Client failed to restart in compatibility mode 6.0 -> 4.2. Fixed.
      • The Desktop Client did not open the linked camera when clicking on the corresponding hyperlink at the event log page. Fixed.
  • Hanwha ONLY:
    • Hanwha analytics plugin has been optimized: excessive requests removed.
    • On Systems with RoadAI configured, the vehicles detected as "Gray" were displayed as "Orange". Fixed.
    • Hanwha Intercom: the pop-up tooltip did not show up on the Push-to-talk soft-trigger button. Fixed.
    • Archive that was recorded from Hanwha QNV-8080R could not be played back after the recording had been running for some time. Fixed.
Сверху