RT-AX1800HP
Actively updated well evidenced
firmware is arriving about as often as it always has
12 days since the last release against a median gap of 96 (0.1x)
- Last firmware
- 18 September 2026 (12 days ago)
- Releases seen
- 9
- Update rhythm
- about every 3 months
- Support observed
- ≥2 years
- Vendor's promise
- no support period we can evaluate
- Patch latency
- not measurable — its changelogs name no CVE ids
Which one do I have?
ASUS ships this model in more than one hardware revision, and they do not share firmware. The revision is printed on the label on the underside, usually after the model — Ver 1.0, V4.6. Getting it wrong is the easiest way to read the wrong answer here.
- RT-AX1800HP v2 Actively updated 8 releases
Firmware history
-
3.0.0.4.388_34020 18 September 2026
Release notes — disclosure 0.34
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing.Improve system stability.We recommend upgrading to this version to maintain optimal protection.
Archived page, fetched 21 September 2026
-
3.0.0.4.386_69224 24 August 2026
Release notes — disclosure 0.45
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing.New Features- New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada.Bug Fixes and Enhancements- Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.Security Fixes- Strengthened data handling in Networks configuration functions.- Improved data validation in Networks rule list processing.- Fixed a data-handling issue in the DNS query caching component.- Strengthened verification when a software component downloads external resources, improving connection security.- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.- Fixed a data-handling issue in a firmware component on a specific model.- Improved data-display handling in a web function to enhance browsing security.- Strengthened input data validation in a device-pairing web function.- Improved data validation in the configuration file upload/sync function.- Improved how the account service restart process is handled.- Removed a non-essential internal function endpoint, strengthening overall access control.- Adjusted the debug file access mechanism, strengthening protection of internal data.- Strengthened data handling in the system logging function.We recommend upgrading to this version to maintain optimal protection.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69195 7 May 2026
Release notes — disclosure 0.37
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing.Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.We recommend upgrading to this version to ensure up-to-date protection.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69193 26 February 2026
Release notes — disclosure 0.33
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing.Strengthened input sanitization mechanism.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69155 27 October 2025
Release notes — disclosure 0.40
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing. - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69136 6 August 2025
Release notes — disclosure 0.55
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing. Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment. Security Enhancements- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69100 10 March 2025
Release notes — disclosure 0.57
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing. 1. Fixed the UI issue in Chrome.2. Fixed client binding issues in Mesh scenarios.3. Enhanced input parameter handling techniques to improve data processing stability and system security.4. Enhance system access control mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69089 8 November 2024
Release notes — disclosure 0.59
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing. 1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced device security through improved buffer handling in connection features.3. Refined data handling processes, ensuring secure and accurate information management.4. Enhanced file access control mechanisms, promoting a more secure operating environment.5. Strengthened certificate protection, providing enhanced data security.
Archived page, fetched 29 September 2026
-
3.0.0.4.386_69041 28 October 2024
Cites CVE-2023-28702, CVE-2023-28703
Release notes — disclosure 1.00
This version of firmware is only applicable to RT-AX1800HP, please check the model name from the product SN label or box label before utilizing. Bug fixes and functionality modifications: -Resolved the issue with login and password changes. -Resolved bandwidth errors when setting 5GHz channel to 116. -Introduced support for disabling the 11b feature on the 2.4GHz band. -Enhanced Dynamic DNS functionality and integrated support for HE.NET. -Improved the Smart Connect feature. -Implemented an LED on/off option for the AiMesh node. -Optimized the AiMesh Topology page for better performance. -Increased the stability of the AiMesh system. Security updates: -Enhanced protection for credentials. -Enhanced security for OTA firmware updates. -Fixed DoS vulnerabilities in firewall configuration pages. Thanks to Jinghe Gao's contribution. -Fixed DoS vulerabilities in httpd. Thanks to Howard McGreehan. -Fixed information disclosure vulnerability. Thanks to Junxu (Hillstone Network Security Research Institute) contribution. -Fixed CVE-2023-28702 and CVE-2023-28703. Thanks to Xingyu Xu(@tmotfl) contribution. -Fixed null pointer dereference vulnerabilities. Thanks to Chengfeng Ye, Prism Research Group - cse hkust contribution.
Archived page, fetched 29 September 2026
Evidence
2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.
Identifiers: marketing_name RT-AX1800HP
Judged by lifecycle-1 on 30 September 2026.
How these verdicts are computed.