RT-BE90U

Firmware history

1. 3.0.0.6.102_58500 23 September 2026

   Release notes — disclosure 0.55

   This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.https://www.asus.com/support/faq/1057454/Supports Surfshark VPN account login for a smoother user experience. (Supported model only)Security FixesWeb management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.AiCloud: Strengthened the data handling mechanism for the network neighborhood host list.AiCloud: Improved how share link identifiers are generated, and adjusted the file and disk information query process.AiCloud: Strengthened authentication and path validation for remote file access.System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.Web management interface: Adjusted the output handling of feedback content.Notification service: Added identity verification for local connection sources and tightened the related file permission settings.Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.Network diagnostic data query: Strengthened value range checks for time interval parameters.Network diagnostic data query: Added allowlist validation for query fields.Internal data query: Improved field matching logic and optimized the memory release process under error conditions.Time synchronization settings: Strengthened parameter validation for the server name.File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.

   Archived page, fetched 29 September 2026

2. 3.0.0.6.102_58499 21 September 2026

   Release notes — disclosure 0.55

   This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.https://www.asus.com/support/faq/1057454/Supports Surfshark VPN account login for a smoother user experience. (Supported model only)Security FixesWeb management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.Web management interface: Adjusted the output handling of feedback content.Notification service: Added identity verification for local connection sources and tightened the related file permission settings.Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.Network diagnostic data query: Strengthened value range checks for time interval parameters.Network diagnostic data query: Added allowlist validation for query fields.Internal data query: Improved field matching logic and optimized the memory release process under error conditions.Time synchronization settings: Strengthened parameter validation for the server name.File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.

   Archived page, fetched 23 September 2026

3. 3.0.0.6.102_58436 24 August 2026

   Release notes — disclosure 0.45

   New Features- LED Lighting Scheduler: Added scheduling support for LED lighting, so lighting can turn on or off automatically on a custom schedule. (Available only on supported models.)- New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada.Bug Fixes and Enhancements- Improved MAC address display logic on the WDS (wireless bridge) page, fixing cases where the band name and its MAC address were shown incorrectly.- Fixed an issue where Client List sorting could stop working under certain conditions, and removed a duplicate wired device card in the "By Interface" view.- Optimized the IPv6 address design for Networks.- Improved handling of unstable network cables.- Improved stability during the AiMesh node setup process.- Improved the reconnection process for IPv6 Plus (Japan) after a reboot or disconnect.- Improved IPv6 Option handling, including network connectivity after a reboot following a direct firmware upgrade in certain scenarios.- Fixed an issue where a physical LAN port could disappear after the setup process when using the automatic WAN type detection mechanism.- Improved AP Isolation synchronization for Networks profiles that don't use a dedicated subnet.- Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.- Improved Network stylesheet loading reliability.- Fixed an issue where the URL-forwarding utility could become unresponsive after an internal network component update.Security Fixes- Strengthened data handling in Networks configuration functions.- Improved data validation in Networks rule list processing.- Fixed a data-handling issue in the DNS query caching component.- Strengthened verification when a software component downloads external resources, improving connection security.- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.- Fixed a data-handling issue in a firmware component on a specific model.- Improved data-display handling in a web function to enhance browsing security.- Strengthened input data validation in a device-pairing web function.- Improved data validation in the configuration file upload/sync function.- Improved how the account service restart process is handled.- Removed a non-essential internal function endpoint, strengthening overall access control.- Adjusted the debug file access mechanism, strengthening protection of internal data.- Strengthened data handling in the system logging function.We recommend upgrading to this version to maintain optimal protection

   Archived page, fetched 29 September 2026

4. 3.0.0.6.102_58390 17 July 2026

   Release notes — disclosure 0.37

   Bug Fixes and Enhancements：- Enhanced overall firmware stability for a smoother user experience.- Improved Android device connectivity when IPv6 is enabled on Smart Home Master.- Optimized the layout and display of the Client List for better readability.- Refined network compatibility and stability under specific WAN Types.- Enhanced remote connection stability for a more reliable management experience.

   Archived page, fetched 29 September 2026

5. 3.0.0.6.102_58305 6 May 2026

   Release notes — disclosure 0.40

   Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling. We recommend upgrading to this version to ensure up-to-date protection.

   Archived page, fetched 29 September 2026

6. 3.0.0.6.102_58160 21 January 2026

   Release notes — disclosure 0.30

   Initial firmware release

   Archived page, fetched 29 September 2026

Evidence

2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name RT-BE90U

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS