0.316.2 v1.5.7-stable
high risk
jo-inc/camofox-browserOct 4, 2026 → Oct 4, 20260 days between releases
What's New
Upgraded FFmpeg and patched TOTP re-enrollment security vulnerability
Breaking Changes
- Anonymous callers can no longer replace existing second factors via TOTP re-enrollment endpoints
- This release has been superseded by v1.5.8-stable due to login issues
Improvements
- Upgraded FFmpeg from 9.0.1 to 9.0.2
- Fixed TOTP re-enrollment MFA bypass vulnerability (GHSA-qx86-4v5r-26g5)
Upgrade Notes
This release has been superseded by v1.5.8-stable, which addresses a TOTP login change that prevented login in some circumstances. Users should verify their MFA configuration as the re-enrollment process now requires an authenticated session.
The Two Releases
0.316.2
0.316.2
Oct 4, 2026· 18 days ago
This update focuses on hardware integrations and bug fixes, specifically improving the EU Data Act login, adjusting Solis and Weishaupt meter readings, and fixing battery modes for E3/DC devices.
Full release notesv1.5.7-stable
v1.5.7-stable
Oct 4, 2026· 18 days ago
Supersedes v1.5.6 to address a TOTP security vulnerability and upgrade FFmpeg.
Full release notes