Bug Fixes and Enhancements
Improved stability during the AiMesh node setup process.
Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.

Security Fixes
Strengthened data handling in Networks configuration functions.
Improved data validation in Networks rule list processing.
Fixed a data-handling issue in the DNS query caching component.
Strengthened verification when a software component downloads external resources, improving connection security.
Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
Fixed a data-handling issue in a firmware component on a specific model.
Strengthened input data validation in a device-pairing web function.
Improved data validation in the configuration file upload/sync function.
Improved how the account service restart process is handled.
Removed a non-essential internal function endpoint, strengthening overall access control.
Adjusted the debug file access mechanism, strengthening protection of internal data.
Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

Security Fixes
- Enhanced system security by addressing an unsafe remote script execution mechanism in.
- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.
We recommend upgrading to this version to ensure up-to-date protection.

Improvements:
- Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
- Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
- Refined accessibility-related UI and interaction details.
- Improved overall remote connection stability.

Security Enhancements:
- Strengthened input sanitization mechanism
- Enhanced system API validation for stronger protection consistency.
- Strengthened command handling and system resource access controls.
- Improved system logging and security event recording mechanisms.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Improved compatibility with certain IoT devices.

1. Enhanced input parameter handling techniques to improve data processing stability and system security.
2. Enhance system access control mechanisms.

1. Fixed UI compatibility issues with the latest Chrome.
2. Fixed client binding issues in Mesh scenarios.

Please unzip the firmware file, and then verify the checksum.
SHA256: 5f293f71151db4d02350b0e5442246305492c9eb780ec5d2a5fc2c32c3b68f49

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Release note:
Security:
Fixed command injection vulnerabilities
Fixed remove ookla-IPQ956X
Fixed vulnerability in command injection after authentication
Fixed XSS potentially via malformed hostname in DHCP request
Fixed Fixed Stored Cross Site Scriptin
Fixed XSS attack via EXT3 USB in foldername
Fixed ping '-c' parameter in administration Network Tools is validated only on client side

Feature:
Add OCN Support.
Fixed v6plus related issues.
Fixed AiMesh node under Ethernet backhaul issues.
Fixed GUI bugs while searching for AiMesh Node.
Fixed USB function related issues.

Please unzip the firmware file, and then verify the checksum.
SHA256: 36940100f024549ec1166deb8108044e1c4fd86e7d58cac5dcd834455f9cf507

1.Fixed CVE-2022-46871
2.Fixed Client DOM Stored XSS.
3.Improved AiMesh backhaul stability.
4.Fixed AiMesh topology UI bugs.
5.Fixed the reboot issue when assigning specific clients in VPN fusion.
6.Fixed the VPN fusion bug when importing the Surfshark WireGuard conf file.
7.Fixed network map bugs.

Please unzip the firmware file first then check the MD5 code.
MD5: b75bd42c4476fccc7fdd7f7f11066424

1. Fixed multi-language GUI bugs
2. Improved system stability

Please unzip the firmware file first then check the MD5 code.
MD5: 537c303236a6cf28817025b89b24e9ae

1. Optimized memory usage and improved system stability.
2. Improved Wi-Fi performance.
3. Added a new web GUI login URL http://www.asusrouter.com
4. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net for report and help us to fix it.
5. Fixed VPN fusion, AiMesh, and Network map GUI bugs.
6. Fixed WAN compatibility issue with Starlink router.
7. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-1000494
8. Fixed IPSec server vulnerability, CVE-2022-40617

Please unzip the firmware file first then check the MD5 code.
MD5: 045cb85fe14dead39a2e1bda609f2741

1. Supported WireGuard VPN server and client.
2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.
3. Supported new devices connection notification.
4. Supported connection diagnostic on the ASUS router app.
5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.
6. Upgraded parental control and added reward, new scheduler for flexible setting
7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
8. Fixed status page HTML vulnerability. Thanks to David Ward.
9. Fixed CVE-2018-1160. Thanks to Steven Sroba.
10. Fixed cfg_server security issue.
11. Fixed 2.5G port compatibility issue.

Please unzip the firmware file first then check the MD5 code.
MD5: 396e11a6dd8723c76faf8302bb01b2af

1. GUI bug fixes.
2. Improve system stability.

Please unzip the firmware file first then check the MD5 code.
MD5: 844a652ab60ac88e7c0e7c5c09cbc4e7

Initial release

Please unzip the firmware file first then check the MD5 code.
MD5: 46572e747d24187e4f6a42f0c6978dd3