What's Changed

Security

• Fixed CVE-2025-68973, CVE-2025-6020, CVE-2025-13601, CVE-2025-69420, CVE-2026-21945, CVE-2025-69419 and CVE-2026-21932 for Docker images by @ViacheslavKlimov and @smatvienko-tb
• Fixed CVE-2026-22610 by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14865
• Fixed CVE-2025-15284 by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14729

Core & Rule Engine

• Added Redis ACL (username) authentication support by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/14743
• Fixed invalid finish ts for jobs with zero tasks in task manager by @ViacheslavKlimov in https://github.com/thingsboard/thingsboard/pull/14728
• Fixed entity data query for sysadmin by @dashevchenko in https://github.com/thingsboard/thingsboard/pull/14564
• Fixed partition cleanup for non-public PostgreSQL schemas by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/14631
• Fixed SMS usage state when disabled in tenant profile by @dashevchenko in https://github.com/thingsboard/thingsboard/pull/14792
• Fixed unnecessary database updates for disabled users during failed login by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/14751

Transport

• Fixed NPE for LwM2M client context after reboot by @nickAS21 in https://github.com/thingsboard/thingsboard/pull/14645
• Fixed CoAP Unicast/Multicast MID Conflict and Silent ACK Rejection by @nickAS21 in https://github.com/thingsboard/thingsboard/pull/14748

UI

• Fixed LwM2M bootstrap toggle not persisting "Add Bootstrap config" button state by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14614
• Fixed map action panel hide when switching to another data layer by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14746
• Fixed opening tenant profile autocomplete when "Create new" button is clicked by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14804
• Fixed country autocomplete autofill and improved validation by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14802
• Fixed missing '%' character in alias help text by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14903
• Fixed padding in Range Chart and Bar Chart with label widgets when overlay enabled by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14895
• Fixed errors when public user views alarm comments by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14922

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.1.1...v4.2.1.2