TUF-AX6000
Slowing down well evidenced
updates are coming less often than this product's own history
145 days since the last release against a median gap of 58 (2.5x)
- Last firmware
- 8 May 2026 (5 months ago)
- Releases seen
- 8
- Update rhythm
- about every 2 months
- Support observed
- ≥2 years
- Vendor's promise
- no support period we can evaluate
- Patch latency
- not measurable — its changelogs name no CVE ids
Firmware history
-
3.0.0.4.388_34013 8 May 2026
Release notes — disclosure 0.35
Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.We recommend upgrading to this version to ensure up-to-date protection.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_34011 23 April 2026
Release notes — disclosure 0.38
Improvements:- Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.- Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.- Refined accessibility-related UI and interaction details.- Improved overall remote connection stability.Security Enhancements:- Strengthened input sanitization mechanism- Enhanced system API validation for stronger protection consistency.- Strengthened command handling and system resource access controls.- Improved system logging and security event recording mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33965 23 October 2025
Release notes — disclosure 0.41
- Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33950 1 October 2025
Release notes — disclosure 0.45
Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.Security Enhancements- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- AiCloud Authentication Hardening (CWE-287) – Added layered verification.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33911 14 May 2025
Release notes — disclosure 0.31
Fixed the IPTV compatibility issue for Now TV.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33903 17 March 2025
Release notes — disclosure 0.33
1.Fixed the UI issue in Chrome.2.Enhanced input parameter handling techniques to improve data processing stability and system security.3.Enhance system access control mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33427 6 November 2024
Release notes — disclosure 0.58
1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.
Archived page, fetched 29 September 2026
-
3.0.0.4.388_33419 15 October 2024
Release notes — disclosure 0.57
1. Optimized memory management mechanisms, improving system efficiency and stability.2. Strengthened input validation and data processing workflows, further protecting your information security.3. Improved web rendering engine, enhancing browsing experience and security.4. Enhanced security of system command processing to guard against potential malicious operations.5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment
Archived page, fetched 29 September 2026
Evidence
2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.
Identifiers: marketing_name TUF-AX6000 · openwrt_id asus_tuf-ax6000
Judged by lifecycle-1 on 30 September 2026.
How these verdicts are computed.