Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

TUF-AX3000 v2

Actively updated well evidenced

firmware is arriving about as often as it always has

16 days since the last release against a median gap of 86 (0.2x)

Sign in to be emailed when this verdict changes.
Last firmware
14 September 2026 (16 days ago)
Releases seen
15
Update rhythm
about every 3 months
Support observed
≥4 years
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Which one do I have?

ASUS ships this model in more than one hardware revision, and they do not share firmware. The revision is printed on the label on the underside, usually after the model — Ver 1.0, V4.6. Getting it wrong is the easiest way to read the wrong answer here.

Firmware history

  1. 3.0.0.4.388_24049 14 September 2026

    Release notes — disclosure 0.45 
    Bug Fixes and EnhancementsImproved stability during the AiMesh node setup process.Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.Security FixesStrengthened data handling in Networks configuration functions.Improved data validation in Networks rule list processing.Fixed a data-handling issue in the DNS query caching component.Strengthened verification when a software component downloads external resources, improving connection security.Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.Fixed a data-handling issue in a firmware component on a specific model.Strengthened input data validation in a device-pairing web function.Improved data validation in the configuration file upload/sync function.Improved how the account service restart process is handled.Removed a non-essential internal function endpoint, strengthening overall access control.Adjusted the debug file access mechanism, strengthening protection of internal data.Strengthened data handling in the system logging function.We recommend upgrading to this version to maintain optimal protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.4.388_23986 8 May 2026

    Release notes — disclosure 0.35 
    Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.We recommend upgrading to this version to ensure up-to-date protection.

    Archived page, fetched 29 September 2026

  3. 3.0.0.4.388_23984 23 April 2026

    Release notes — disclosure 0.44 
    Improvements: - Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v. - Improved Wi-Fi roaming compatibility and stability for iOS 26 devices. - Refined accessibility-related UI and interaction details. - Improved overall remote connection stability. Security Enhancements: - Strengthened input sanitization mechanism - Enhanced system API validation for stronger protection consistency. - Strengthened command handling and system resource access controls. - Improved system logging and security event recording mechanisms.

    Archived page, fetched 29 September 2026

  4. 3.0.0.4.388_23947 28 October 2025

    Release notes — disclosure 0.41 
    - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

    Archived page, fetched 29 September 2026

  5. 3.0.0.4.388_23860 14 May 2025

    Release notes — disclosure 0.31 
    Improved compatibility with certain IoT devices.

    Archived page, fetched 29 September 2026

  6. 3.0.0.4.388_23859 12 March 2025

    Release notes — disclosure 0.37 
    1. Enhanced input parameter handling techniques to improve data processing stability and system security.2. Enhance system access control mechanisms.

    Archived page, fetched 29 September 2026

  7. 3.0.0.4.388_23856 7 February 2025

    Release notes — disclosure 0.37 
    1. Fixed UI compatibility issues with the latest Chrome.2. Fixed client binding issues in Mesh scenarios.

    Archived page, fetched 29 September 2026

  8. 3.0.0.4.388_23848 19 November 2024

    Release notes — disclosure 0.58 
    1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.

    Archived page, fetched 29 September 2026

  9. 3.0.0.4.388_23785 15 August 2023

    Release notes — disclosure 0.39 
    Release note: Security:Fixed command injection vulnerabilitiesFixed remove ookla-IPQ956XFixed vulnerability in command injection after authenticationFixed XSS potentially via malformed hostname in DHCP requestFixed Fixed Stored Cross Site ScriptinFixed XSS attack via EXT3 USB in foldernameFixed ping '-c' parameter in administration Network Tools is validated only on client sideFeature:Add OCN Support.Fixed v6plus related issues.Fixed AiMesh node under Ethernet backhaul issues.Fixed GUI bugs while searching for AiMesh Node.Fixed USB function related issues.

    Archived page, fetched 29 September 2026

  10. 3.0.0.4.388.22525 13 February 2023

    Cites CVE-2022-468712

    Release notes — disclosure 0.70 
    1.Fixed CVE-2022-468712.Fixed Client DOM Stored XSS.3.Improved AiMesh backhaul stability.4.Fixed AiMesh topology UI bugs.5.Fixed the reboot issue when assigning specific clients in VPN fusion.6.Fixed the VPN fusion bug when importing the Surfshark WireGuard conf file.7.Fixed network map bugs.

    Archived page, fetched 29 September 2026

  11. 3.0.0.4.388.22237 4 January 2023

    Release notes — disclosure 0.24 
    1. Fixed multi-language GUI bugs2. Improved system stability

    Archived page, fetched 29 September 2026

  12. 3.0.0.4.388.21617 21 November 2022

    Cites CVE-2022-40617

    Release notes — disclosure 0.88 
    1. Optimized memory usage and improved system stability.2. Improved Wi-Fi performance.3. Added a new web GUI login URL http://www.asusrouter.com4. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net for report and help us to fix it.5. Fixed VPN fusion, AiMesh, and Network map GUI bugs.6. Fixed WAN compatibility issue with Starlink router.7. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-10004948. Fixed IPSec server vulnerability, CVE-2022-40617

    Archived page, fetched 29 September 2026

  13. 3.0.0.4.388.21380 9 November 2022

    Cites CVE-2018-1160

    Release notes — disclosure 0.99 
    1. Supported WireGuard VPN server and client.2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.3. Supported new devices connection notification.4. Supported connection diagnostic on the ASUS router app.5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.6. Upgraded parental control and added reward, new scheduler for flexible setting7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.8. Fixed status page HTML vulnerability. Thanks to David Ward.9. Fixed CVE-2018-1160. Thanks to Steven Sroba.10. Fixed cfg_server security issue.11. Fixed 2.5G port compatibility issue.

    Archived page, fetched 29 September 2026

  14. 3.0.0.4.386.49272 8 August 2022

    Release notes — disclosure 0.11 
    1. GUI bug fixes.2. Improve system stability.

    Archived page, fetched 29 September 2026

  15. 3.0.0.4.386.48750 6 May 2022

    Release notes — disclosure 0.30 
    Initial release

    Archived page, fetched 29 September 2026

Evidence

One archived page sits behind this record, the earliest read on 2 August 2026. Everything above was read from it, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name TUF-AX3000

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS