ZenWIFI Pro XT12

Firmware history

1. 3.0.0.6.102_36698 15 May 2026

   Release notes — disclosure 0.35

   Security Fixes- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.

   Archived page, fetched 29 September 2026

2. 3.0.0.6.102_36697 12 March 2026

   Release notes — disclosure 0.42

   Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Improved system behavior when using System diagnostic on feedback page.Bug Fixes:Fixed incorrect connection status display for certain Wi-Fi devices.Fixed AiMesh nodes not displayed correctly in the device list.Fixed a disconnection issue that occurred after enabling the MAC Filter.Security Enhancements:Strengthened input sanitization mechanism.Enhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.

   Archived page, fetched 29 September 2026

3. 3.0.0.6.102_36637 23 October 2025

   Release notes — disclosure 0.37

   - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

   Archived page, fetched 29 September 2026

4. 3.0.0.6.102_35254 26 August 2025

   Release notes — disclosure 0.45

   Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.Security Enhancements- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

   Archived page, fetched 29 September 2026

5. 3.0.0.6.102_35213 26 March 2025

   Release notes — disclosure 0.49

   1. Fixed the UI issue in Chrome.2. Fixed client binding issues in Mesh scenarios.3. Enhanced input parameter handling techniques to improve data processing stability and system security.4. Enhance system access control mechanisms.

   Archived page, fetched 29 September 2026

6. 3.0.0.6.102_35199 13 November 2024

   Release notes — disclosure 0.58

   1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.

   Archived page, fetched 29 September 2026

7. 3.0.0.4.388_24177 1 November 2023

   Release notes — disclosure 0.55

   New features:-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNSBug fixes and functionality modifications:-Resolved the issue with login and password changes.-Resolved the IPSec VPN connection issues.-Resolved the Instant Guard connection issues.-Fixed the issue where Traffic Analyzer sometimes couldn't record data.-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.-Fine-tuned the description for port status.-Enabled DynDNS and No-IP DDNS to use IPv6.-Fixed AiMesh preferred AP identification in site survey results.-Updated timezone list for Greenland, Mexico, and Iran.-Allowed WireGuard Server clients to access the Samba server.-Fixed memory leak issue.-The ARP response issue has been resolved, along with the connection issue between the router and the ROG Phone 6 and 7.-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node-Ensured consistent display of client status on the WireGuard server.-Enhanced system stability when accessing the WireGuard Server with DMZ enabled.-Improved stability when enabling or disabling the WireGuard server.-Addressed an issue that prevented clients from accessing the network when setting up the OpenVPN server in TAP mode.-Optimized memory utilization and fixed an occasional server error when registering DDNS with an app.-Corrected a bug encountered when adding a rule to the Network Services Filter.Security updates:-Enabled and supported ECDSA certificates for Let's Encrypt.-Fixed DoS vulnerabilities in firewall configuration pages. -Fixed DoS vulerabilities in httpd. -Fixed information disclosure vulnerability. -Fixed null pointer dereference vulnerabilities. -Fixed token authentication security issues.-Fixed security issues on the status page.-Fixed Client DOM Stored XSS.-Upgraded to the latest dropbear version.-Fixed a stack overflow vulnerability.

   Archived page, fetched 29 September 2026

8. 3.0.0.4.388.21678 21 November 2022

   Cites CVE-2022-40617

   Release notes — disclosure 0.91

   1. Optimized memory usage and improved system stability.2. Fixed 2.5G port compatibility issues.3. Added a new web GUI login URL http://www.asusrouter.com4. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net for report and help us to fix it.5. Fixed VPN fusion, AiMesh, and Network map GUI bugs.6. Fixed WAN compatibility issue with Starlink router.7. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-10004948. Fixed IPSec server vulnerability, CVE-2022-40617

   Archived page, fetched 29 September 2026

9. 3.0.0.4.388.21293 24 October 2022

   Cites CVE-2018-1160

   Release notes — disclosure 0.99

   Try more on ASUSWRT 2022 with new features at https://asus.click/ASUSWRT20221. Supported WireGuard VPN server and client.2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.3. Supported new devices connection notification.4. Supported connection diagnostic on the ASUS router app.5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.6. Upgraded parental control and added reward, new scheduler for flexible setting7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.8. Fixed status page HTML vulnerability. Thanks to David Ward.9. Fixed CVE-2018-1160. Thanks to Steven Sroba.10. Fixed cfg_server security issue.

   Archived page, fetched 29 September 2026

10. 3.0.0.4.386.50350 5 October 2022

    Cites CVE-2018-1160

    Release notes — disclosure 0.90

    1. Fixed AiProtection, AiMesh and GUI bugs2. Improved system stability3. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.4. Fixed status page HTML vulnerability. Thanks to David Ward.5. Fixed CVE-2018-1160. Thanks to Steven Sroba.6. Fixed cfg_server security issue.

    Archived page, fetched 29 September 2026

11. 3.0.0.4.386.49723 4 August 2022

    Release notes — disclosure 0.48

    1. Supported U-NII-4 5.9GHz channels(US only) for reducing interference and improving connection speed. 2. Fixed AiMesh backhaul issue.3. Fixed Wake-on-LAN issue.4. Improved system stability.

    Archived page, fetched 29 September 2026

12. 3.0.0.4.386.48823 17 May 2022

    Cites CVE-2022-26376

    Release notes — disclosure 0.60

    1. Improved Wi-Fi performance.2. Improved system stability.3. Fixed CVE-2022-26376

    Archived page, fetched 29 September 2026

13. 3.0.0.4.386.48174 21 March 2022

    Release notes — disclosure 0.43

    1. Fixed AiProtection bugs 2. Fixed IPSec VPN connection issues 3. Fixed Ethernet backhaul connection issues 4. 160MHz throughput optimization 5. Improved system stability

    Archived page, fetched 29 September 2026

14. 3.0.0.4.386.46699 30 November 2021

    Release notes — disclosure 0.24

    1. Fixed AiMesh and VPN issues2. Improved system stability and fixed GUI issue

    Archived page, fetched 29 September 2026

Evidence

One archived page sits behind this record, the earliest read on 2 August 2026. Everything above was read from it, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name ZenWIFI Pro XT12

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS