Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

RT-AX59U

Actively updated well evidenced

firmware is arriving about as often as it always has

49 days since the last release against a median gap of 74 (0.7x)

Sign in to be emailed when this verdict changes.
Last firmware
12 August 2026 (2 months ago)
Releases seen
18
Update rhythm
about every 2 months
Support observed
≥4 years
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.4.388_34098 12 August 2026

    Release notes — disclosure 0.60 
    New Features - New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada. Bug Fixes and Enhancements - Improved stability during the AiMesh node setup process. Security Fixes - Strengthened data handling in Networks configuration functions. - Improved data validation in Networks rule list processing. - Fixed a data-handling issue in the DNS query caching component. - Strengthened verification when a software component downloads external resources, improving connection security. - Adjusted the information response mechanism of the device discovery service, strengthening protection of device information. - Fixed a data-handling issue in a firmware component on a specific model. - Strengthened input data validation in a device-pairing web function. - Improved data validation in the configuration file upload/sync function. - Improved how the account service restart process is handled. - Removed a non-essential internal function endpoint, strengthening overall access control. - Adjusted the debug file access mechanism, strengthening protection of internal data. - Strengthened data handling in the system logging function. We recommend upgrading to this version to maintain optimal protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.4.388_34013 6 May 2026

    Release notes — disclosure 0.40 
    Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling. We recommend upgrading to this version to ensure up-to-date protection.

    Archived page, fetched 29 September 2026

  3. 3.0.0.4.388_34011 16 March 2026

    Release notes — disclosure 0.37 
    Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Security Enhancements:Strengthened input sanitization mechanismEnhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms

    Archived page, fetched 29 September 2026

  4. 3.0.0.4.388_33965 23 October 2025

    Release notes — disclosure 0.37 
    - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

    Archived page, fetched 29 September 2026

  5. 3.0.0.4.388_33950 9 September 2025

    Release notes — disclosure 0.45 
    Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.Security Enhancements- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- AiCloud Authentication Hardening (CWE-287) – Added layered verification.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

    Archived page, fetched 29 September 2026

  6. 3.0.0.4.388_33911 27 May 2025

    Release notes — disclosure 0.31 
    Fixed the IPTV compatibility issue for Now TV.

    Archived page, fetched 29 September 2026

  7. 3.0.0.4.388_33903 13 March 2025

    Release notes — disclosure 0.33 
    1.Fixed the UI issue in Chrome.2.Enhanced input parameter handling techniques to improve data processing stability and system security.3.Enhance system access control mechanisms.

    Archived page, fetched 29 September 2026

  8. 3.0.0.4.388_33407 27 December 2024

    Release notes — disclosure 0.39 
    1. Improved the stability of AiMesh backhaul connections, resulting in a more robust and reliable mesh network performance.2. Strengthened input validation and data processing workflows, further protecting your information security.

    Archived page, fetched 29 September 2026

  9. 3.0.0.4.388_33405 4 December 2024

    Release notes — disclosure 0.32 
    - Resolved an issue where the Traffic Analyzer feature was not functioning properly.

    Archived page, fetched 29 September 2026

  10. 3.0.0.4.388_33404 7 November 2024

    Release notes — disclosure 0.58 
    1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.

    Archived page, fetched 29 September 2026

  11. 3.0.0.4.388_33392 28 June 2024

    Release notes — disclosure 0.32 
    Bug Fixes and Enhancements：Resolved an issue where the Traffic Analyzer feature was not functioning properly.

    Archived page, fetched 29 September 2026

  12. 3.0.0.4.388_33391 2 May 2024

    Cites CVE-2023-48795, CVE-2023-5678, CVE-2024-0727

    Release notes — disclosure 0.78 
    Bug Fixes and Enhancements：- Enhanced AiMesh Stability- Fixed an issue where the RE product ID was not being updated in the AiMesh topology.- Added DS-Lite Support.- Corrected a display issue in the OpenVPN server that prevented IPv6 settings from showing correctly.- Fixed a persistent GUI issue on 'Let's Encrypt Authorization' that displayed 'Authorization' incorrectly.- Resolved a bug that prevented offline devices from being deleted in the Router App.- Fixed an issue where the system would reboot due to parental control rules with empty enable fields.Security updates:- Addressed CVE-2023-48795 by updating the dropbear SSH server.- Applied patches for CVE-2023-5678 & CVE-2024-0727 - Improved security in OpenVPN custom configuration.

    Archived page, fetched 29 September 2026

  13. 3.0.0.4.388_33147 14 March 2024

    Release notes — disclosure 0.56 
    Bug fixes and functionality modifications: 1. Resolved IPTV interruptions during extended use. 2. Addressed Guest Network performance issues with active IPTV. 3. Fixed potential Aura RGB crash. 4. Added eXtra Long Range support for enhanced connectivity. 5. Rectified potential IPV6-related crashes. 6. Improved roaming efficiency for AiMesh nodes under weak signals. 7. Addressed router crashes during WireGuard setup. 8. Fixed abnormal activation status in the Gear Accelerator function UI

    Archived page, fetched 29 September 2026

  14. 3.0.0.4.388_32702 27 October 2023

    Release notes — disclosure 0.24 
    1. Fixed vpn client related issues.2. Improve system stability.

    Archived page, fetched 29 September 2026

  15. 3.0.0.4.388_32431 14 August 2023

    Release notes — disclosure 0.38 
    Security:Fixed command injection vulnerabilitiesFixed remove ookla-IPQ956XFixed vulnerability in command injection after authenticationFixed XSS potentially via malformed hostname in DHCP requestFixed Fixed Stored Cross Site ScriptinFixed XSS attack via EXT3 USB in foldernameFixed ping '-c' parameter in administration Network Tools is validated only on client sideFeature:Add OCN Support.Fixed v6plus related issues.Fixed AiMesh node under Ethernet backhaul issues.Fixed GUI bugs while searching for AiMesh Node.Fixed USB function related issues.

    Archived page, fetched 29 September 2026

  16. 3.0.0.4.388_32198 20 June 2023

    Release notes — disclosure 0.41 
    1. Imporve system stability.2. Fix speed issue under QoS.3. Add Time machine.4. Fix GUI issues.

    Archived page, fetched 29 September 2026

  17. 3.0.0.4.388.31948 26 April 2023

    Release notes — disclosure 0.33 
    - Fixed AiMesh related issues.- Fixed wireless setting related issues.- Fixed minor GUI issues.- Supports smart connect.- Supports more USB functions.- Supports iPhone tether.

    Archived page, fetched 29 September 2026

  18. 3.0.0.4.388.31345 6 January 2023

    Release notes — disclosure 0.30 
    Initial release

    Archived page, fetched 29 September 2026

Evidence

2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name RT-AX59U · openwrt_id asus_rt-ax59u

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS