This release notes document for Extreme IQ Engine version 10.9.1 covers new features, addressed issues, and known issues for Extreme Networks access points managed via ExtremeCloud IQ 25.13.0 or later. Released August 2026, this version introduces no new hardware but delivers key security and interoperability enhancements across a broad range of AP platforms, including the AP3000, AP4000, AP4020, AP5020, and AP5022 series. A notable security update (HOS-25681) deprecates SHA-1 cryptographic algorithms for SSH access, enforcing SHA-2 (minimum SHA-256) for host key algorithms, key exchange methods, and MACs across numerous supported AP models. Electronic Shelf Label (ESL) support is extended via Solum and Hanshow dongles on AP3020, AP3020X, and AP3020W platforms. Addressed issues resolve MLO SSID beaconing failures, 802.1X PEAP authentication on 802.11ax APs, CWP redirect failures on AP5020, AP4000 kernel panics, TLS 1.3 incompatibility affecting AFS server connectivity, and WPA3-Enterprise PMKID reassociation handling. One known issue documents boot failures on AP5010, AP5050D, and AP5050U when non-Extreme-certified micro-USB console cables are connected.
