NebulaFlex Switch XS3800 Series - V4.80 Patch 4 Firmware Release

Zyxel_Melen · October 9

Zyxel Switch XS3800 Series Release Note

October 2025

ZyNOS Firmware Version on all models

(Click Hyperlink to download the firmware directly)

Zyxel XS3800-28 - V4.80(ABML.4)C0

New Feature and Enhancements

1. [Nebula 19.10] Support Port advisor.

2. [Nebula 19.20] VLAN ingress check enabled by default.

Bug Fix

C=Cloud mode, S=Standalone mode

Bug fix	C	S
1. [eITS #241001395] IPSG with IPv6 has lease time of only 10 seconds.	-	V
2. [eITS #250302409] Fixed the device sometimes fail to connect with Nebula server.	V	V
3. [eITS #250300923] Fixed an issue where RADIUS authentication could fail after stack takeover.	V	V
4. [eITS #250400091] Fixed that truncated DNS packets cannot be process to cause DNS parsing failed.	V	-
5. [eITS #250400528] Fixed an issue where SNMP queries to OIDs 1.3.6.1.2.1.4.22 or 1.3.6.1.2.1.4.35 could cause high CPU utilization.	V	V
6. [eITS #250500429] Fixed crash when receiving IPv6 tunnel packet.	-	V
7. [eITS #250600900] Fixed SNMP query ipv6 neighbor table may occur switch hang issue.	-	V
8. [eITS #250301012] Resolved an issue where packet forwarding failed on trunk member ports with MAC pinning enabled after a stacking takeover.	-	V
9. [eITS #250800735] Fixed security vulnerabilities CVE-2016-8858, CVE- 2006-4925 and CVE-2018-15473.	-	V
10. [eITS#240801706] Fixed the client could not obtain an IP address if the same IP address was configured in the IPSG static binding table. Bug fix Nebula Standalone	V	V
11. [eITS#240800369] Switch crash when- displaying the MAC address.	V	V
12. [eITS#241100262] Cannot clear classifier names longer than 10 characters.	-	V
13. [eITS#241100265] Fix user cannot configure classifier when two same sequence policy route already been configured.	-	V
14. [eITS#241100288] MSTP root guard cannot prevent the RSTP Superior switch from preempting the root.	V	V
15. [eITS#241100538] Fix special characters(space,' ,") can be allowed in username to cause configuration error.	-	V
16. [eITS#250100026] Fixed abnormal crash issue when continues queries OID 1.0.8802.1.1.2.1.5.4795.1.2.1.1 and its sub-OIDs	V	V
17. [eITS#250201088] Fixed DHCPv6 snooping not work due to device cannot process DHCPv6 request with IA_PD+IA_NA option.	V	V
18. [eITS#]When the RADIUS server does not provide a session timeout attribute, the switch will reauthenticate successfully connected devices every hour by default	V	V
19. [eITS#250302215] Fixed high CPU usage triggered by client switching between trunk interfaces	V	V
20. [eITS#250302188] MAC authentication via Nebula cloud-auth becomes significantly slower in authenticating supplicants after a reboot. Bug fix Nebula Standalone	V	-
21. [eITS#250601084] Fixed hang when using CLI “show tech-support”.	V	V
22. [eITS#250601569] When the default gateway is configured with a link-local address, the IPv6 routing table may display abnormal/incorrect information for the next hop.	-	V
23. [eITS#250301742] Supplicants that have successfully passed 802.1X authentication may still be incorrectly assigned to guest VLAN if the reachability of RADIUS server is unstable	-	V
24. [eITS#250800443] Special characters in the port name cause the port information to appear blank on the Dashboard.	V	V

Please refer to the Download Link for more details.