RT-AX86U
Slowing down reasonably evidenced
updates are coming less often than this product's own history
166 days since the last release against a median gap of 60 (2.8x)
- Last firmware
- 17 April 2026 (5 months ago)
- Releases seen
- 5
- Update rhythm
- about every 2 months
- Support observed
- ≥5 years
- Vendor's promise
- no support period we can evaluate
- Patch latency
- not measurable — its changelogs name no CVE ids
Firmware history
-
3.0.0.4.388_24436 17 April 2026
Release notes — disclosure 0.33
Security Enhancements:Strengthened input sanitization mechanism.Enhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.4.386.42840 29 April 2021
Release notes — disclosure 0.52
1. Fix VPN GUI issues.2. Improve connection stability.3. Fix AiMesh related bugs.4. Minor GUI issue fixes.5. Upgrade dropbear to version 2020.816. Fix buffer overflow vulnerability7. Fix slowloris denial of service attack.8. Fix authentication bypass vulnerability.9. Fixed the fragattacks vulnerability.
Archived page, fetched 29 September 2026
-
3.0.0.4.386.42095 18 March 2021
Cites CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687, CVE-2020-36109
Release notes — disclosure 0.73
- Fixed DoS vulnerability. Thanks for Tsinghua University NISL's contribution.- Improved system stability.- Fixed GUI bugs.- Security Fixed: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-36109
Archived page, fetched 29 September 2026
-
9.0.0.4.386.41994 29 January 2021
Cites CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25687
Release notes — disclosure 0.74
Security Fixed: Fixed CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686Please be noted this is a quick fix beta version for DNSmasq vulnerabilities. Refer to "Method 2: Update Manually" in https://www.asus.com/support/FAQ/1008000 to update this firmware.
Archived page, fetched 29 September 2026
-
3.0.0.4.386.41535 30 December 2020
Release notes — disclosure 0.65
1. AiMesh 2.0- System optimization: one click in AiMesh to optimize the topology- System Ethernet backhaul mode, all nodes will only connect by ethernet, all bands will be released for wireless clients.- System factory default and reboot.- Client device reconnect, make the device to offline and online again.- Client device binding to specific AP.- Guest WiFi on all Mesh nodes (all node need to upgrade to 3.0.0.4.386 firmware)- Access nodes USB application.Connection priority and Ethernet backhaul mode introductionhttps://www.asus.com/support/FAQ/1044184How to setup ASUS AiMesh or ZenWiFi Mesh Ethernet backhaul under different conditionshttps://www.asus.com/support/FAQ/1044151/2. New Family interface in ASUS router App.ASUS Router App for iOS must greater or equal to iOS v1.0.0.5.75Android version greater or equal to v1.0.0.5.743. The unit of the WiFi time scheduler goes to 1 minute.4. Support IPSec IKE v1 and IKE v2, and you can use the Windows 10 native VPN client program to connect to the router's IPSec VPN server. The Windows 10 new FAQ is in https://www.asus.com/support/FAQ/10335765. 2.4 and 5G on the network map could be configured in the same tab.6. Captcha for login can be disabled in administration -> system.7. Printer server port can be disabled on the USB app page.8. Clients which connect to the guest network can be viewed in the network map -->view list --> interface9. Fix Lets encrypt not working properly.10. Add IPTV supports for specific region.
Archived page, fetched 29 September 2026
-
3.0.0.4.386.41035 19 November 2020
Release notes — disclosure 0.31
- Update language supports- Fix minor GUI bugs
Archived page, fetched 29 September 2026
Evidence
One archived page sits behind this record, the earliest read on 2 August 2026. Everything above was read from it, and each is kept byte for byte so it can be checked after the vendor edits the original.
Identifiers: marketing_name RT-AX86U
Judged by lifecycle-1 on 30 September 2026.
How these verdicts are computed.