Stuey3D/VibeSDR app-v11.0.13-592

VibeSDR 11.0.13 (Android 592) — security update

on GitHub

VibeSDR 11.0.13 — a security update. Please update.

Important security update. We've had important communication from Cloudflare advising us to upgrade to the latest Cloudflare Tunnel connector (cloudflared 2026.10.4). It fixes a certificate trust issue: eight eMudhra (emSign) intermediate certificates were found to use weak private keys, and older versions of cloudflared still trusted them. The new version no longer trusts them. Cloudflare says it has seen no active exploitation. This release contains that tunnel update, which VibeServer uses to list receivers publicly on VibeSDR.net.

Nothing else has changed since 11.0.10.

• VibeSDR-11.0.13-592.apk is the app (net.vibesdr.app). All updates come here and from Google Play.
• VibeSDR-legacy-11.0.13-592.apk is the old app (com.vibesdr.app), kept only so you can export your bookmarks. Its VibeSDR has a new home notice has an EXPORT MY BOOKMARKS button. In the new app, open the frequency card → BOOKMARKS → IMPORT, then uninstall "VibeSDR (legacy)".

The iPhone and iPad app does not contain cloudflared and is not affected. The earlier Android builds have been withdrawn.

SHA-256 checksums are in SHA256SUMS.txt.