Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

TUF-BE9400

Actively updated well evidenced

firmware is arriving about as often as it always has

7 days since the last release against a median gap of 33 (0.2x)

Sign in to be emailed when this verdict changes.
Last firmware
23 September 2026 (7 days ago)
Releases seen
9
Update rhythm
about every 33 days
Support observed
≥12 months
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.6.102_58500 23 September 2026

    Release notes — disclosure 0.55 
    This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.https://www.asus.com/support/faq/1057454/Supports Surfshark VPN account login for a smoother user experience. (Supported model only)Security FixesWeb management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.AiCloud: Strengthened the data handling mechanism for the network neighborhood host list.AiCloud: Improved how share link identifiers are generated, and adjusted the file and disk information query process.AiCloud: Strengthened authentication and path validation for remote file access.System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.Web management interface: Adjusted the output handling of feedback content.Notification service: Added identity verification for local connection sources and tightened the related file permission settings.Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.Network diagnostic data query: Strengthened value range checks for time interval parameters.Network diagnostic data query: Added allowlist validation for query fields.Internal data query: Improved field matching logic and optimized the memory release process under error conditions.Time synchronization settings: Strengthened parameter validation for the server name.File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.6.102_58499 21 September 2026

    Release notes — disclosure 0.55 
    This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.https://www.asus.com/support/faq/1057454/Supports Surfshark VPN account login for a smoother user experience. (Supported model only)Security FixesWeb management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.Web management interface: Adjusted the output handling of feedback content.Notification service: Added identity verification for local connection sources and tightened the related file permission settings.Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.Network diagnostic data query: Strengthened value range checks for time interval parameters.Network diagnostic data query: Added allowlist validation for query fields.Internal data query: Improved field matching logic and optimized the memory release process under error conditions.Time synchronization settings: Strengthened parameter validation for the server name.File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.

    Archived page, fetched 23 September 2026

  3. 3.0.0.6.102_58436 24 August 2026

    Release notes — disclosure 0.45 
    New Features- LED Lighting Scheduler: Added scheduling support for LED lighting, so lighting can turn on or off automatically on a custom schedule. (Available only on supported models.)- New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada.Bug Fixes and Enhancements- Improved MAC address display logic on the WDS (wireless bridge) page, fixing cases where the band name and its MAC address were shown incorrectly.- Fixed an issue where Client List sorting could stop working under certain conditions, and removed a duplicate wired device card in the "By Interface" view.- Optimized the IPv6 address design for Networks.- Improved handling of unstable network cables.- Improved stability during the AiMesh node setup process.- Improved the reconnection process for IPv6 Plus (Japan) after a reboot or disconnect.- Improved IPv6 Option handling, including network connectivity after a reboot following a direct firmware upgrade in certain scenarios.- Fixed an issue where a physical LAN port could disappear after the setup process when using the automatic WAN type detection mechanism.- Improved AP Isolation synchronization for Networks profiles that don't use a dedicated subnet.- Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.- Improved Network stylesheet loading reliability.- Fixed an issue where the URL-forwarding utility could become unresponsive after an internal network component update.Security Fixes- Strengthened data handling in Networks configuration functions.- Improved data validation in Networks rule list processing.- Fixed a data-handling issue in the DNS query caching component.- Strengthened verification when a software component downloads external resources, improving connection security.- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.- Fixed a data-handling issue in a firmware component on a specific model.- Improved data-display handling in a web function to enhance browsing security.- Strengthened input data validation in a device-pairing web function.- Improved data validation in the configuration file upload/sync function.- Improved how the account service restart process is handled.- Removed a non-essential internal function endpoint, strengthening overall access control.- Adjusted the debug file access mechanism, strengthening protection of internal data.- Strengthened data handling in the system logging function.We recommend upgrading to this version to maintain optimal protection

    Archived page, fetched 29 September 2026

  4. 3.0.0.6.102_58390 17 July 2026

    Release notes — disclosure 0.37 
    Bug Fixes and Enhancements：- Enhanced overall firmware stability for a smoother user experience.- Improved Android device connectivity when IPv6 is enabled on Smart Home Master.- Optimized the layout and display of the Client List for better readability.- Refined network compatibility and stability under specific WAN Types.- Enhanced remote connection stability for a more reliable management experience.

    Archived page, fetched 29 September 2026

  5. 3.0.0.6.102_58305 6 May 2026

    Release notes — disclosure 0.40 
    Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling. We recommend upgrading to this version to ensure up-to-date protection.

    Archived page, fetched 29 September 2026

  6. 3.0.0.6.102_58303 16 April 2026

    Release notes — disclosure 0.41 
    Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Improved system behavior when using System diagnostic on feedback page.Bug Fixes:Fixed incorrect connection status display for certain Wi-Fi devices.Fixed main network connectivity issue when enabling IPv6 for both the main network and Smart Home Master.Security Enhancements:Strengthened input sanitization mechanismEnhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.

    Archived page, fetched 29 September 2026

  7. 3.0.0.6.102_58160 20 January 2026

    Release notes — disclosure 0.36 
    Bug Fixes and Enhancements: - Ensures all Ethernet-connected devices and client counts are correctly displayed in the client list. - Improved the stability of IoT device connections. - Resolved an issue that prevented offline devices from being removed from the client list. - Fixed network instability issues caused by MAC Filter.

    Archived page, fetched 29 September 2026

  8. 3.0.0.6.102_58138 23 October 2025

    Release notes — disclosure 0.37 
    - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

    Archived page, fetched 29 September 2026

  9. 3.0.0.6.102_58121 26 September 2025

    Release notes — disclosure 0.30 
    Initial firmware release

    Archived page, fetched 29 September 2026

Evidence

2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name TUF-BE9400

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS