Product Updates

New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.

We’ve released Kandji Agent 4.7.5 (5374).

This release includes miscellaneous bug fixes and performance improvements.

Security

CVE-2026-39118 — An access control issue existed in the Kandji Agent (macOS). A local attacker with standard user privileges could invoke restricted functionality. This issue was addressed with improved validation.

Affected: Kandji...

Managed OS for iOS, iPadOS, and tvOS has been updated. The latest approved versions are now 26.4 and 18.7.7, with the following release dates:

iOS 26.4 : Mar 24, 2026

iOS 18.7.7 : Mar 24, 2026

iPadOS 26.4 : Mar 24, 2026

iPadOS 18.7.7 : Mar 24, 2026

tvOS 26.4 : Mar 24, 2026

Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.4; for Sequoia, 15.7.5; and for Sonoma, 14.8.5, with the following release dates:

macOS 26.4 : Mar 24, 2026

macOS 15.7.5 : Mar 24, 2026

macOS 14.8.5 : Mar 24, 2026

The Windows Update Library Item gives you control over how and when updates install on Windows devices.

Configure auto update behavior with options ranging from notify-only to fully silent installs. Set active hours to protect users from disruptive restarts during the workday, and remove the ability for users to pause updates from the Windows Update...

Specific ADE Library Items can now be assigned directly to devices in the Awaiting Enrollment table, providing further flexibility to the ADE enrollment process. These assignments can be made on a one-off basis, in bulk, or via the enterprise API, and override what is assigned to the Blueprint or Blueprint Routing.

For more information, see our product...

We've released Kandji Agent 4.7.3 (5373).

This release includes miscellaneous bug fixes and performance improvements. Additionally, the last opened date/timestamp for Mac apps is now collected by the agent and submitted to Prism during daily check-ins.

The Kandji Agent now keeps track of when Mac apps were last opened throughout the day, as reported by macOS. The most recently recorded date/timestamp is submitted daily to Prism during the Kandji Agent's daily check-in. macOS regularly updates the last opened date/timestamp of apps as they are used, making this data useful for license monitoring and...

Routing Config Edited activity entries, logged when changes are made to Blueprint Routing, now include full before and after details of what changed.

The reset work profile passcode command is now available for Android devices. This command can be sent from the Devices page and the Iru enterprise API.

The reset work profile passcode command clears the current work profile passcode and lets you optionally set a new one for the end-user. If the device has an Android Work Profile Passcode Library Item...