TUF-BE3600
Actively updated well evidenced
firmware is arriving about as often as it always has
12 days since the last release against a median gap of 57 (0.2x)
- Last firmware
- 18 September 2026 (12 days ago)
- Releases seen
- 12
- Update rhythm
- about every 2 months
- Support observed
- ≥2 years
- Vendor's promise
- no support period we can evaluate
- Patch latency
- not measurable — its changelogs name no CVE ids
Which one do I have?
ASUS ships this model in more than one hardware revision, and they do not share firmware. The revision is printed on the label on the underside, usually after the model — Ver 1.0, V4.6. Getting it wrong is the easiest way to read the wrong answer here.
- TUF-BE3600 v2 Actively updated 5 releases
Firmware history
-
3.0.0.6.102_40338 18 September 2026
Release notes — disclosure 0.50
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Security FixesWeb management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.AiCloud: Strengthened the data handling mechanism for the network neighborhood host list.AiCloud: Improved how share link identifiers are generated, and adjusted the file and disk information query process.AiCloud: Strengthened authentication and path validation for remote file access.System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.Web management interface: Adjusted the output handling of feedback content.Notification service: Added identity verification for local connection sources and tightened the related file permission settings.Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.Network diagnostic data query: Strengthened value range checks for time interval parameters.Network diagnostic data query: Added allowlist validation for query fields.Internal data query: Improved field matching logic and optimized the memory release process under error conditions.Time synchronization settings: Strengthened parameter validation for the server name.File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_40284 4 September 2026
Release notes — disclosure 0.49
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Bug Fixes and EnhancementsSupport LED scheduler capabilities.Improved client list update flow and related UI responsiveness.Improved configuration matching accuracy in specific scenarios.Improved AiMesh stability.Improved IPv6 connectivity stability in selected reboot/reconnect scenarios.Fixed specific LAN/UPnP behavior issues after setup.Security FixesApplied multiple security hardening updates across system components.Improved input validation and request-handling protections in selected paths.Included security fixes in affected services/modules (including bundled components).Added defenses for memory-safety and injection-related risk patterns.We recommend upgrading to this version to maintain optimal protection.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_39380 24 August 2026
Release notes — disclosure 0.49
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Bug Fixes and Enhancements- Support LED scheduler capabilities.- Improved client list update flow and related UI responsiveness.- Improved configuration matching accuracy in specific scenarios.- Improved AiMesh stability.- Improved IPv6 connectivity stability in selected reboot/reconnect scenarios.- Fixed specific LAN/UPnP behavior issues after setup.Security Fixes:- Applied multiple security hardening updates across system components.- Improved input validation and request-handling protections in selected paths.- Included security fixes in affected services/modules (including bundled components).- Added defenses for memory-safety and injection-related risk patterns.
Archived page, fetched 15 September 2026
-
3.0.0.6.102_39263 4 May 2026
Release notes — disclosure 0.44
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.We recommend upgrading to this version to ensure up-to-date protection.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_39249 4 March 2026
Release notes — disclosure 0.50
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Improved system behavior when using System diagnostic on feedback page.Bug Fixes:Fixed incorrect connection status display for certain Wi-Fi devices.Fixed AiMesh nodes not displayed correctly in the device list.Fixed a disconnection issue that occurred after enabling the MAC Filter.Fixed main network connectivity issue when enabling IPv6 for both the main network and Smart Home Master.Security Enhancements:Strengthened input sanitization mechanism.Enhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_39116 30 October 2025
Release notes — disclosure 0.50
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.- Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_39074 29 September 2025
Release notes — disclosure 0.50
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.Security Enhancements- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- AiCloud Authentication Hardening (CWE-287) – Added layered verification.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list
Archived page, fetched 29 September 2026
-
3.0.0.6.102_37307 15 July 2025
Release notes — disclosure 0.43
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.Applied Broadcom patch to resolve a potential 5 GHz Wi-Fi vulnerability that, in rare cases, could trigger temporary disconnections for connected devices; updating ensures normal operation and enhanced protection.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_37287 19 May 2025
Release notes — disclosure 0.50
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.- Implemented a security patch to address an OpenVPN issue.- Fixed display issues that could occur during the login process.- Fixed a potential DNS Open Resolver vulnerability.- Fixed a problem affecting 5 GHz connections when operating in repeater mode.- Fixed an anomaly in the wireless scheduler functionality.- Fixed an issue preventing the configuration of time scheduling for the SDN client.- Fixed an issue causing Movistar IPTV to malfunction due to incorrect firewall rules.- Improved network stability to prevent connectivity loss after long usage.- Improve 5G WiFi connection stability- Improved compatibility with IoT devices when using WPA2+WPA3 security protocols.- Improved the stability and performance of remote connections via the app.- Enhanced the stability of MLO (Multi-Link Operation) connections.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_37273 9 April 2025
Release notes — disclosure 0.58
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.1. Fixed the UI issue in Chrome.2. Fixed client binding issues in Mesh scenarios.3. Enhanced input parameter handling techniques to improve data processing stability and system security.4. Enhance system access control mechanisms.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_37260 28 November 2024
Release notes — disclosure 0.60
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.*Please be advised that due to an architecture upgrade in AiMesh, we highly discourage downgrading to earlier firmware versions as it may result in connectivity problems. If you experience any difficulties, we suggest resetting the AiMesh router to its default settings and re-establishing the mesh connection. Please unzip the firmware file, and then verify the checksum SHA: 2d843428e2efad53cd3bd4bfc34fd9b023d733fb7605cf8eb1505d066cfa5dbaNew features:New "Network" page to consolidate main network and Smart Home Master for simplified management.Supported MLO (Multi-Link Operation) backhaul. *Currently, MLO backhaul can only be formed with the same model.Improvement:Media Bridge mode stabilityIPSec VPN performanceNetwork stabilityBug fixed:IoT client communication issuesResolved DNS query issue, restoring client device web access.
Archived page, fetched 29 September 2026
-
3.0.0.6.102_34961 6 November 2024
Release notes — disclosure 0.62
This version of firmware is only applicable to TUF-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.
Archived page, fetched 29 September 2026
Evidence
2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.
Identifiers: marketing_name TUF-BE3600
Judged by lifecycle-1 on 30 September 2026.
How these verdicts are computed.