Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

ZenWiFi BQ16 Pro

Slowing down well evidenced

updates are coming less often than this product's own history

149 days since the last release against a median gap of 62 (2.4x)

Sign in to be emailed when this verdict changes.
Last firmware
4 May 2026 (5 months ago)
Releases seen
9
Update rhythm
about every 2 months
Support observed
≥1 year
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.6.102_39256 4 May 2026

    Release notes — disclosure 0.35 
    Security Fixes- Enhanced system security by addressing an unsafe remote script execution mechanism in.- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.We recommend upgrading to this version to ensure up-to-date protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.6.102_39254 16 March 2026

    Release notes — disclosure 0.41 
    Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Improved system behavior when using System Diagnostic on feedback page.Bug Fixes:Fixed incorrect connection status display for certain Wi-Fi devices.Fixed a system issue that caused AiCloud features to appear on unsupported models.Security Enhancements:Strengthened input sanitization mechanismEnhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.

    Archived page, fetched 29 September 2026

  3. 3.0.0.6.102_37026 30 October 2025

    Release notes — disclosure 0.45 
    - Apple Compatibility – Improved stability and compatibility with Apple devices and the latest OS updates.- Connection Stability – Enhanced AiMesh stability and overall system reliability.- Dual WAN – Optimized switching behavior when secondary WAN is unavailable.- Offline Status – Enhanced accuracy in UI display.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.- Implemented comprehensive validation and expanded command filtering in the web history API.- Fixed a privilege escalation vector in the IFTTT token exchange mechanism- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

    Archived page, fetched 29 September 2026

  4. 3.0.0.6.102_36998 13 August 2025

    Release notes — disclosure 0.55 
    Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment. Security Enhancements - Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks. - HTTPS on 8443 – Management interface now served over TLS by default. - UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure. - AiCloud Authentication Hardening (CWE-287) – Added layered verification. - Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow. - Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services. - Enhanced IPsec Parameter Validation – The existing input checks have been hardened. - Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways. - Detailed Audit Trails – Expanded logging within the authentication module. System Improvements - Connection Stability – Core algorithms refined for steadier links. - Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes. - Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

    Archived page, fetched 29 September 2026

  5. 3.0.0.6.102_36935 18 July 2025

    Release notes — disclosure 0.45 
    1. Applied Broadcom patch to resolve a potential 5 GHz Wi-Fi vulnerability that, in rare cases, could trigger temporary disconnections for connected devices; updating ensures normal operation and enhanced protection.2. Fixed MAC Filter inconsistency with MLO devices3. Improved Network Map client list accuracy

    Archived page, fetched 29 September 2026

  6. 3.0.0.6.102_36934 26 May 2025

    Release notes — disclosure 0.49 
    Bug Fixes and Enhancements:1. Implemented a security patch to address an OpenVPN issue.2. Improved compatibility with IoT devices on WPA2/WPA3 networks.3. Enhanced the stability of remote connections.4. Resolved an issue with the WiFi scheduler.5. Improved Parental Control scheduling with support for SDN clients.6. Fixed an issue causing Movistar IPTV to malfunction.

    Archived page, fetched 29 September 2026

  7. 3.0.0.6.102_36909 10 March 2025

    Release notes — disclosure 0.37 
    1. Enhanced input parameter handling techniques to improve data processing stability and system security.2. Enhance system access control mechanisms.

    Archived page, fetched 29 September 2026

  8. 3.0.0.6.102_36869 20 January 2025

    Release notes — disclosure 0.49 
    Bug Fixes and Enhancements：1. Enhanced Client Connection Stability.2. WPA Encryption Settings Update.Added new configuration options for WPA encryption, including the option to select AES for improved client compatibility. This settings can be found under "Network > Main Network".3. Improved AiMesh Backhaul Compatibility.4. Fixed GUI Bugs.5. Strengthened certificate protection, providing enhanced data security.

    Archived page, fetched 29 September 2026

  9. 3.0.0.6.102_36789 11 November 2024

    Release notes — disclosure 0.58 
    1. Strengthened input validation and data processing workflows to further protect information security. 2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts. 3. Enhanced device security through improved buffer handling in connection features. 4. Refined data handling processes, ensuring secure and accurate information management. 5. Enhanced file access control mechanisms, promoting a more secure operating environment. 6. Strengthened certificate protection, providing enhanced data security.

    Archived page, fetched 29 September 2026

Evidence

One archived page sits behind this record, the earliest read on 2 August 2026. Everything above was read from it, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name ZenWiFi BQ16 Pro

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS