New Features
- LED Scheduler: Added scheduling support for LED, so lighting can turn on or off automatically on a custom schedule.
- New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada.

Bug Fixes and Enhancements
- Improved MAC address display logic on the WDS (wireless bridge) page, fixing cases where the band name and its MAC address were shown incorrectly.
- Fixed an issue where Client List sorting could stop working under certain conditions, and removed a duplicate wired device card in the "By Interface" view.
- Optimized the IPv6 address design for Networks.
- Improved handling of unstable network cables.
- Improved stability during the AiMesh node setup process.
- Fixed an issue where a physical LAN port could disappear after the setup process when using the automatic WAN type detection mechanism.
- Improved AP Isolation synchronization for Networks profiles that don't use a dedicated subnet.
- Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.
- Improved Network stylesheet loading reliability.
- Fixed an issue where the URL-forwarding utility could become unresponsive after an internal network component update.

Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Improved data-display handling in a web function to enhance browsing security.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.
We recommend upgrading to this version to maintain optimal protection.

Optimized resource allocation to enhance system responsiveness and stability during firmware upgrade.

Security Fixes
- Enhanced system security by addressing an unsafe remote script execution mechanism in.
- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.
We recommend upgrading to this version to ensure up-to-date protection.

Improvements:
Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
Refined accessibility-related UI and interaction details.
Improved overall remote connection stability.

Bug Fixes:
Fixed incorrect connection status display for certain Wi-Fi devices.
Fixed a disconnection issue that occurred after enabling the MAC Filter.

Security Enhancements:
Strengthened input sanitization mechanism
Enhanced system API validation for stronger protection consistency.
Strengthened command handling and system resource access controls.
Improved system logging and security event recording mechanisms.

- Enhanced the feedback process for reporting specific technical issues.
- Resolved IPv6 connectivity issues within Guest Network environments.
- Fixed a display bug where clients connected to AiMesh nodes were missing from the device list.
- Optimized connectivity and stability for IoT devices.
- Improved roaming stability for seamless node transitions.

-Improves remote connection stability.
-Improved performance and reliability of tunnel processes.
-Improves connecting stability when roaming.
-Enhanced system stability under heavy connection loads.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

Bug Fixes
- Fixed the disappearing issue for the WiFi client control panel of Block Internet access, Time scheduling, MAC, and IP address binding.

Improved Wi‑Fi performance to maintain higher throughput at longer distances.