Bug Fixes and Enhancements
Support LED scheduler capabilities.
Improved client list update flow and related UI responsiveness.
Improved configuration matching accuracy in specific scenarios.
Improved AiMesh stability.
Improved IPv6 connectivity stability in selected reboot/reconnect scenarios.
Fixed specific LAN/UPnP behavior issues after setup.

Security Fixes:
Applied multiple security hardening updates across system components.
Improved input validation and request-handling protections in selected paths.
Included security fixes in affected services/modules (including bundled components).
Added defenses for memory-safety and injection-related risk patterns.

We recommend upgrading to this version to maintain optimal protection.

Security Fixes
- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.
- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.

Improvements:
- Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
- Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
- Refined accessibility-related UI and interaction details.
- Improved overall remote connection stability.
- Improved system behavior when using System diagnostic on feedback page.
- Optimized LED accuracy for AiMesh Ethernet onboarding status.
- Fixed temporary disconnections during client roaming via roam-assist.

Bug Fixes:
- Fixed connection failures when using 5GHz 160MHz bandwidth.
- Fixed an issue preventing 5G WPS from enabling correctly.
- Fixed connectivity issues with NOW TV after configuration.
- Fixed incorrect connection status display for certain Wi-Fi devices.
- Fixed AiMesh nodes not displayed correctly in the device list.
- Fixed a disconnection issue that occurred after enabling the MAC Filter.
- Fixed main network connectivity issue when enabling IPv6 for both the main network and Smart Home Network.

Security Enhancements:
- Enhanced system API validation for stronger protection consistency.
- Strengthened command handling and system resource access controls.
- Improved system logging and security event recording mechanisms.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list
- Upload speed - Improve upload speed performance.
- Page buffering - Improve page loading speed.

[Bug Fixes]
- Fixed an issue where the SSID was not discoverable by clients when configuring WPA2/WPA3 Enterprise security.
- Fixed an issue in AiMesh where nodes with an unideal uplink connection status were not being optimized after any node joined the router.
- Fixed a potential DNS Open Resolver vulnerability
- Fixed compatibility issue of MLO clients.
- Fixed a problem affecting 5 GHz connections when operating in repeater mode.
- Fixed an anomaly in the wireless scheduler functionality.
- Fixed an issue preventing the configuration of time scheduling for the guest network client.
- Fixed a potential crash issue related to prolonged usage of AiProtection.
- Fixed failed to limit bandwidth as intended.
- Fixed a problem where Now TV IPTV was unable to obtain an IP address.
- Fixed Now IPTV to malfunction due to incorrect firewall rules.
- Fixed a WiFi crash issue caused by certain feature configurations.

[Enhancements]
- Improved AiMesh and MLO stability.
- Improved the stability of IoT device connections.
- Improved Smart Home Master connectivity of nodes in the AiMesh system.
- Fixed connection fail issue when manually setting up WireGuard VPN.
- Added a "Hide Backhaul SSID" option. Enabling this option will disable the random SSID.
- Security updates.

[New] WPA Encryption Setting
Including the option to select AES for improved client compatibility. (It can be found under "Network > Main Network")

[Enhancements]
- Improved AiMesh backhaul stability.
- AiMesh Node WAN port can be used as LAN.
- Enhanced security of system command processing to guard against potential malicious operations.
- Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.
- Strengthened input validation and data processing workflows to further protect information security.
- Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
- Enhanced input parameter handling techniques to improve data processing stability and system security.
- Enhance system access control mechanisms.
- Optimized memory management mechanisms, improving system efficiency and stability.

[Bug Fixes]
- Fixed connectivity issue with Apple wireless devices.
- Fixed the UI compatibility issue with the Chrome browser update.
- Fixed UI issues during VPN file export.
- Fixed irregularities in AiProtection.
- Fixed client binding issues in Mesh scenarios.
- Fixed Smart home Master profile can not connect to the internet after appling AdGuard.
- Fixed LAN device disconnections after SDN configuration.
- Fixed an issue that could lead to system failures following a reboot.
- Fixed wireless network settings page disappears in AP mode on the WebGUI.
- Fixed the issue where devices do not appear in the client list after connecting to the ASUS router.
- Fixed compatibility issues with older models, preventing WiFi malfunctions after SDN settings.

Bug Fixes and Enhancements：
- Improved AiMesh and MLO stability.
- Improved connectivity of IoT devices.
- Improved Smart Home Master connectivity of nodes in the AiMesh system.
- Fixed failed to limit bandwidth as intended.
- Fixed compatibility issue of MLO clients.
- Fixed connection fail issue when manually setting up WireGuard VPN.
- Security updates.