/
🖥️ PowerFolder Server 26 SP2

🖥️ PowerFolder Server 26 SP2

 

 

  • Release Date: July 2026

  • Build Number: 26.2.115

  • Type: Hot Fix Release

📦 Download Links

  • JAR File (Wiki Password required)

  • Linux

  • Windows

  • Outlook Add-In (No changes)

⬆️ Upgrade Information

  • Please read this complete Release Notes and instructions before upgrading.

  • Please follow the regular upgrade documentation for Windows or Linux

  • Upgrading any previous version higher or equal to version 16.0.100

  • Cluster: Running different versions on the servers in the cluster is supported but limited to version >= 22.0.100

🔐 Login History

The Login History feature can now be enabled or completely disabled via server configuration:

web.login_history_keep.hours=0

🗂️ Folder Archive Configurability

Deleted top folders are now moved into the user-level archive at:

PowerFolders/username/.PowerFolder/archive

Enable user archive support:

server.archive.user.enabled=true

To disable this functionality and remove the ability for users to restore top folders from the recycle bin set:

server.archive.user.enabled=false

Legacy support for system archive

New default value for:

folderbase.deleteddir=

→ Empty value disables archiving of deleted top folders into the system archive (BACKUP_REMOVE).

For legacy behavior set:

folderbase.deleteddir=BACKUP_REMOVE

Cleanup of Legacy System Archive Folder

The legacy system archive folder:

PowerFolders/BACKUP_REMOVE

is no longer used and can now be safely deleted after the configured system cleanup time.

Restoring top folder from system archive ("BACKUP_REMOVE")

Admins and users are now able to restore top-level folders direct from recycle bin.

web.restore_folder.users.enabled=true

To hide the options from end users set in server config:

web.restore_folder.users.enabled=false

Note: The new functionality is always visible to server admins

👤Account

Added new API action to create authentication tokens for any account with custom validity support.

API Documentation: PowerFolder API Documentation

🌐 Reverse Proxy Stability Improvements

Adjusted default reverse proxy settings for improved stability and performance.

New defaults:

http.proxy.read.timeout.seconds = 30

http.proxy.connect.timeout.seconds = 15

http.proxy.threadpool.max = 200

web.threadpool.min = 10

Deprecated and can now be removed:

http.proxy.timeout.seconds=

🌍 GEO IP Support

GEO IP functionality can now be enabled via configuration:

web.geo.ip=true

🕒 Login History Retention

Added support for automatic purging of Login History entries after 30 days:

web.login_history_keep.hours=720

To turn this function off please use:

web.login_history_keep.hours=0

💻 Client Installation Prompt

The web client installation suggestion popup can now be enabled or disabled via configuration.

Disable the prompt:

web.client_install_prompt.enabled=false

Default setting:

web.client_install_prompt.enabled=true

📱 Automatic Cleanup of Old / Inactive Devices

Added support for automatic removal of old or inactive devices in “My Account” via configuration is now default:

server.devices.cleanup.remove_months=24

To turn off:

server.devices.cleanup.remove_months=0

🔐HARICA Root Certificates Added to Java Truststore

The Java truststore (cacerts) has been updated to include the complete official HARICA Root Certificate portfolio.

Added Root Certificates

The following HARICA Root Certificates are now trusted:

  • HARICA Root CA 2011

  • HARICA Root CA 2015 (RSA & ECC)

  • HARICA TLS Root CA 2021 (RSA & ECC)

  • HARICA TLS Root CA 2021 Cross (RSA & ECC)

  • HARICA Client Root CA 2021 (RSA & ECC)

  • HARICA Qualified Root CA 2021 (RSA & ECC)

🔄 Changing Database Collation to utf8mb4_general_ci in MariaDB v11.x

Attached detailed documentation describing the required database collation adjustment and upgrade procedure: Changing Database Collation to utf8mb4_general_ci

📊Folder Audit Information

More information about this feature: Server Audit Information

🌐WebDAV Token Validity

The default WebDAV token validity is now tecnically 21 years:

security.tokens.webdav.valid.time.seconds=662256000

Server admin can change this as per requirement.

Block folders of expired user

Server admin can now block the shared folders for all users when a account is expired.

Default:

server.account.block.folders.on.expiration=false

Set to:

server.account.block.folders.on.expiration=true

to block and unblock folders of an account when expired/valid again

🛡️Content Security Policy (CSP) Protection

To enhance security against Cross-Site Scripting (XSS) and other injection attacks, the application supports enabling Content Security Policy (CSP) headers. CSP allows the browser to restrict which content sources (scripts, styles, images, etc.) are allowed to load, preventing malicious scripts from executing.

Configuration

The CSP mechanism can be controlled via configuration flags in your server configuration file:

# Enable or disable Content Security Policy web.csp.enable=true # Run in report-only mode or enforce policy web.csp.report_only=false

Options

  • web.csp.enable

    • Default: true

    • Enables CSP headers in responses.

    • Set to false to completely disable CSP protection (not recommended).

  • web.csp.report_only

    • Default: false

    • When false, CSP violations will block content that does not comply with the policy.

    • When true, CSP runs in Report-Only mode: violations are logged/reported, but the browser does not block the content.

    This is useful for debugging potential CSP false positives without breaking user functionality.

✨ New: Default user folders on first login

To simplify onboarding for new users, the system can now automatically create default folders at their first login.
Add the following to your Default.config (server maintenance):

# Default folders f.my_files.name=Meine Dateien f.my_files.dir=Meine Dateien f.shared.name=Geteilt f.shared.dir=Geteilt

🔄 Javascript in Email Templates

The email templates are also improved, please update the email templates or delete the old templates.

⬇️ Downgrade Information (optional)

  • In case a downgrade to a previous version is necessary:

    • For a downgrade, you have to review our downgrade documentation.

    • Simply replace the PowerFolder-Server.jar file with that from the previous version you would like to run.

  • Log messages due to the higher schema version of database can be ignored:

    • [DatabaseMigrator]: Database layout version is newer than expected.

📜 Changelog

  • PFS-5629: Regression: Reducing user quota below current usage deletes user data in v26.2.x

  • Release Date: July 2026

  • Build Number: 26.2.114

  • Type: Hot Fix Release

📜 Changelog

  • PFS-5635: Problem accepting invitations in clustered environment

  • Release Date: July 2026

  • Build Number: 26.2.112

  • Type: Hot Fix Release

📜 Changelog

  • PFS-5614: Reduce load from maintenance process for folder mounts

  • Release Date: July 2026

  • Build Number: 26.2.111

  • Type: Hot Fix Release

📜 Changelog

  • PFS-5600: Reduce DB load on cluster cache for FolderInfo and Account

  • PFS-5542: Velocity template engine gets poisoned with default config on slow server startup

  • Release Date: June 2026

  • Build Number: 26.2.108

  • Type: Hot Fix Release

📜 Changelog

  • PFC-3553: ServerInfo connectAddress silently reset to NULL

  • Release Date: June 2026

  • Build Number: 26.2.107

  • Type: Hot Fix Release

📜 Changelog

  • PFC-3552: Cluster connections drop when v27 client sends subfolder FolderInfo

  • Release Date: June 2026

  • Build Number: 26.2.106

  • Type: Hot Fix Release

📜 Changelog

  • PFS-5579: Fix deletion of devices in web

  • PFS-5573: Hide edit buttons for LDAP/SAML users in my account

  • Release Date: May 2026

  • Build Number: 26.2.105

  • Type: Hot Fix Release

📜 Changelog

  • PFS-5511: OCR Improvements — Performance, Configuration, and Stability

  • PFS-5489: web: fix search for subfolders

  • PFS-5500: Fix org branding: set default color preset

  • PFS-5514: Fix obfuscation issue after server start

  • Release Date: April 2026

  • Build Number: 26.2.100

  • Type: Service Pack Release

📜 Full Changelog

  • PFS-5442: Full-text content search and OCR

  • PFS-4850: Integrate index building and OCR

  • PF-1906: Inline help tooltips across the entire Web UI

  • PFS-5420: Access not possible after invite due to cache invalidation issue causing stale account state across servers

  • PFS-5473: Improve save resilience and online editor server connectivity checks

  • PFS-4733: Show inherited permissions in web sharing dialog of subfolder

  • PFS-3883: Web Sharing dialog of subfolder

  • PFS-4603: Open same ONLYOFFICE session when file is edited in top and sub folder simultaneously

  • PFS-4855: Prevent AI bot account registration and support for reCAPTHA v3

  • PFS-5449: Organization app: Support for unlimited values

  • PFS-5450: Provide config to enable or disbale the LoginHistory

  • PFS-5435: Add filter to folders table to filter all, my, shared to me and invitations

  • PFS-4851: Display device information for “Locked” files with tooltip (username, timestamp & device name)

  • PFS-4846: Provide filter "Expired" in Accounts

  • PFS-4826: Introduce Content-Hashed Static Asset Caching

  • PFS-4822: Popup/Info to suggest user to install client

  • PFS-4815: My Account – Automatically Remove Old / Inactive Devices (e.g., after 2 Years, set over config / admin settings)

  • PFS-4812: WebSocket: Fix sporadic connection drops

  • PFS-4765: Web editor, preview and new defaults for email templates

  • PFS-4752: Provide inline support and icons for Markdown-files (*.md)

  • PFS-4715: Centralize System Archive operations into class FolderArchiver

  • PFS-4664: Show countdown to expiry of account as banner

  • PFS-4604: File links of subfolder should actually be file links of top level folder scoped to subdir

  • PFS-5468: Fix purging in recycle bin

  • PFS-4825: Password with special characters is logged (escaped) by AntiXSSHandler after login

  • PFS-5432: Webtest: fix failing webtests

  • PFS-4759: PowerFolder Community Edition — Free 50-user server with built-in license

  • PFS-5475: Search input: Add clear (X) button to reset search field

  • PFS-5458: Persist FolderSettings in Static Mounting to Prevent Folder Loss on Mode Switch

  • PFS-5456: Hide cut&paste option from toplvl folders. Add copy option to subdirectories

  • PFS-5453: Show banner about server license as banner

  • PFS-5448: Add user folder archive to space usage (quota)

  • PFS-5447: Configurability of Folder Archive

  • PFS-5443: Hide subfolders of topfolders in all folders list when user has access to topfolder

  • PFS-5440: Adjust default reverse proxy settings for better stability

  • PFS-5428: Frontend Validation for Branding color

  • PFS-5426: Introduce Content-Hashed Static Asset Caching for language files

  • PFS-4854: Adjust invite text depending on "security.permissions.group_admin.enabled" configuration

  • PFS-4849: Disable GEO IP per configuraton entry

  • PFS-4848: Provide WebDAV Token limit to settings<security<account security

  • PFS-4847: Provide purging login history after 30 days

  • PFS-4845: Provide filter in Orgs similar to Accounts

  • PFS-4841: Back button requires double click after navigating deep folder structure

  • PFS-4731: Remove public folders - use Links instead

  • PFS-4728: Cleanup user archive top level folder after system cleanup time

  • PFS-4554: Cross-link navigation: Open related folders and accounts from Account or Org Editor in a new tab

  • PFS-5486: Improve speed of news page

  • PFS-5465: Auto complete not working after adding 5x Groups to folders

  • PFS-5464: Manual input of existing group results in new account during folder share

  • PFS-5463: Prevent adding same group twice when already existing

  • PFS-5445: Fix long upload times / failing uploads

  • PFS-5446: Cut & paste not working & menu overlapped (26.2.20)

  • PFS-5444: Close drop-down menu after creating new group inline (>26.2.20)

  • PFS-5434: Fix uploadforms with short lifetime

  • PFS-5433: Fix password poilcy

  • PFS-5427: Fix pop-up message when trying to create account which dosent match the password-policy

  • PFS-4853: “Rescan filesystem” not working when triggered via Accounts view in Admin Webinterface (NullPointerException)

  • PFS-4843: Fix Polish translation in web

  • PFS-4842: AntiXSSHandler logs XSS escape when tokens contain special characters (e.g. “!”)

  • PFS-4832: Fix Illegal mix of collations messages in logs

  • PFS-4827: Password visibility icon missing when creating public link (Firefox & Vivaldi)

  • PFS-4811: Improve browser caching after server downgrade / downgrade

  • PFS-4801: Remove INFO [FolderInfo]: Folder (….) : rename (forced internalize)

  • PFS-4796: Correctly change permissions on subfolder level

  • PFS-4746: Fix renaming of files

  • PFS-3944: Remove deprecated servlets

  • PFS-5487: Button in Folder settings to rebuild search index

  • PFS-5488: Avoid unnecessary avatar HTTP roundtrips on admin account, group and organization table

  • PFS-5467: Fix changing permission of group on subfolder

  • PFS-5462: Provide folder sorting by name / number in group editor

  • PFS-5460: Fix unlimited button in account editor

  • PFS-5459: Login username field is not blocked

  • PFS-4700: Show path in list of search results

  • PFS-5499: Web: Swedish translation (sv)

  • PFS-5498: Web: Slovak translation (sk)

  • PFS-5497: Web: Latvian translation (lv)

  • PFS-5496: Web: Lithuanian translation (lt)

  • PFS-5495: Web: Greek translation (el)

  • PFS-5494: Web: Bulgarian translation (bg)

  • PFS-5493: Web: Arabic translation (ar)

  • PFS-5484: Web: Norwegian translation (nb)

  • PFS-5483: Web: Romanian translation (ro)

  • PFS-5482: Web: Romanian translation (ro)

  • PFS-5481: Web: Hungarian translation (hu)

  • PFS-5480: Web: Czech translation (cs)

  • PFS-5479: Web: Finnish translation (fi)

  • PFS-5478: Web: Danish translation (da)

  • PFS-5471: Web: Russian translation (ru)

  • PFS-5470: Web: Portuguese translation (pt)

  • PFS-4628: QA: Fix file links for files conating .war in name

  • PFS-5491: Fix Android app login

  • PFS-5492: Fix inline view for PDF files

  • PFS-5501: Fix OOM and thread explosion in LuceneIndexManager during Tika content extraction

  • PFS-4833: Migration core module framework

  • PFS-4816: Syslog Multiline Support for Log Management Systems (e.g., Elasticsearch)

  • PFS-5469: Check and prevent owner change on subfolder

  • PFS-5439: Optimize FolderSettings update logic and reduce redundant operations

Alfresco Migration

  • PFS-4839: Migration Dashboard – Analysis View (Phase 1)

  • PFS-5490: API Action to create authentication token for any account with custom validity