Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads - external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Improved data-display handling in a web function to enhance browsing security.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

Security Fixes
- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.
- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.

Improvements:
Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
Refined accessibility-related UI and interaction details.
Improved overall remote connection stability.
Improved system behavior when using System diagnostic on feedback page.

Bug Fixes:
Fixed incorrect connection status display for certain Wi-Fi devices.
Fixed AiMesh nodes not displayed correctly in the device list.
Fixed a disconnection issue that occurred after enabling the MAC Filter.

Security Enhancements:
Strengthened input sanitization mechanism.
Enhanced system API validation for stronger protection consistency.
Strengthened command handling and system resource access controls.
Improved system logging and security event recording mechanisms.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.

Please unzip the firmware file, and then verify the checksum.
SHA256: 9966a50a4c00af2d666ef3a1225b8e5edfcf93466e466f0aed907e3a140ad969

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Fixed injection vulnerability.

Please unzip the firmware file, and then verify the checksum.
SHA256: b1b29f5fabcd289cfbc34fa0c724826807b49fd5833acaa9afb03f9e8b07be9e

[ New features ]
-Kid's Network: Easily create a separate SSID for children's devices. Integrated AdGuard DNS offers advanced protection options, including service and website blocking, query logs, tracker blocking, and ad pop-up Ad blocking. (More details: https://www.asus.com/support/faq/1053541)

-VPN Network: Establish a VPN-specific SSID to centralize VPN settings for all connected devices. This feature allows for the importation of profiles from popular VPN services such as Surfshark, NordVPN, and CyberGhost from VPN Fusion.(More details:https://www.asus.com/support/faq/1053542)

-AdGuard: AdGuard offers ad-blocking and privacy protection features. Simply apply it in the router or Smart Home Master profile to filtering out advertising, tracking, and malware domains at the DNS level, preventing your device from loading potentially harmful content. In network level. (More details:https://www.asus.com/ca-en/support/faq/1051213)

[ New VPN services in VPN Fusion ]
NordVPN:https://www.asus.com/support/FAQ/1051215
CyberShost: https://www.asus.com/support/FAQ/1051645

[ Bug Fixes and Enhancements ]
-Stability enhancements.

[ Security update ]
-OpenVPN config security enhancement in cusomization option.
-USN applicationn security improvement for XSS attacks.

Please unzip the firmware file, and then verify the checksum.
SHA256: a4d82126df4acf39a1bc64d93d2e712e54e2dd720391edaffa9200b8e4344342

New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN
-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS

Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the issue where Traffic Analyzer sometimes couldn't record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Fine-tuned the description for port status.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Allowed WireGuard Server clients to access the Samba server.
-Fixed memory leak issue.
-The ARP response issue has been resolved, along with the connection issue between the router and the ROG Phone 6 and 7.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node
-Ensured consistent display of client status on the WireGuard server.
-Enhanced system stability when accessing the WireGuard Server with DMZ enabled.
-Improved stability when enabling or disabling the WireGuard server.
-Addressed an issue that prevented clients from accessing the network when setting up the OpenVPN server in TAP mode.
-Optimized memory utilization and fixed an occasional server error when registering DDNS with an app.
-Corrected a bug encountered when adding a rule to the Network Services Filter.


Security updates:
-Enabled and supported ECDSA certificates for Let's Encrypt.
-Fixed DoS vulnerabilities in firewall configuration pages.
-Fixed DoS vulerabilities in httpd.
-Fixed information disclosure vulnerability.
-Fixed null pointer dereference vulnerabilities.
-Fixed token authentication security issues.
-Fixed security issues on the status page.
-Fixed Client DOM Stored XSS.
-Upgraded to the latest dropbear version.
-Fixed a stack overflow vulnerability.

Please unzip the firmware file, and then verify the checksum.
SHA256: a97b2ca1f687fe09a9fefa8f3fbd0e53e6360636fdf829cd8c284236d4cbd822

Be noted: This is an early stage beta, there might be bugs. This version can be downgraded via web GUI only.

1. Recap new features of 3.0.0.6.102: Guest network Pro(SDN), VLAN, Auto USB WAN backup, iPhone tethering, Multi-services WAN.
2. Re-defined VLAN, supports Trunk, Access mode with VLAN-only-network.
3. Synchronize Guest network pro (SDN) with VLAN, create/delete new VLAN-only-network will create/delete a new profile in Guest network as well.
4. Port isolation and AP isolation to restrict device access to each other.
5. Re-defined multi-service WAN, disable it by default.
6. Add surfshark VPN in VPN fusion.

Please unzip the firmware file first then check the MD5 code.
MD5: 67edce1962927cbbc18deee86477b725

Be noted: This is an early stage beta, there might be bugs. This version can be downgraded via web GUI only.

New Features:
1. Add Guest Network Pro:
• Kids WiFi: Create a network for kids that blocks access to adult content and has a schedule to control when the network is available.
• VPN WiFi: Create a VPN network that connects to 3rd party VPN services or with ASUS site to site VPN(https://www.asus.com/support/FAQ/1048281/) to encrypts your internet connection and hides your IP address to protect your online activities from being tracked or monitored.
• IoT WiFi : Create an IoT (Internet of Things) network that blocks malicious traffic* and only allows 2.4GHz devices to connect.
• Guest WiFi: Create a guest network with a WiFi schedule and access rights to control when and how guests can use the network.
2. Add VLAN in LAN settings.
3. Add Multi-services WAN, create multiple profiles on a single WAN interface.

Please unzip the firmware file first then check the MD5 code.
MD5: bf82bfeb2d6d7a53802cf4f05f5ca808

1. Improved system stability.
2. Fixed the IPsec VPN compatibility issue with Win10.
3. Fixed the VPN fusion user interface issues under the HTTPS connection.
4. Fixed Client DOM Stored XSS vulnerability.
5. Improved Wireguard performance.

Please unzip the firmware file first then check the MD5 code.
MD5: 49706040fb0ac4824382ba91c0777e5a

1. Optimized memory usage and improved system stability.
2. Fixed 2.5G port compatibility issues.
3. Added a new web GUI login URL http://www.asusrouter.com
4. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net for report and help us to fix it.
5. Fixed VPN fusion, AiMesh, and Network map GUI bugs.
6. Fixed WAN compatibility issue with Starlink router.
7. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-1000494
8. Fixed IPSec server vulnerability, CVE-2022-40617

Please unzip the firmware file first then check the MD5 code.
MD5: 7e443f0d44c7c99273ddb93d695e282c

Try more on ASUSWRT 2022 with new features at https://asus.click/ASUSWRT2022
1. Supported WireGuard VPN server and client.
2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.
3. Supported new devices connection notification.
4. Supported connection diagnostic on the ASUS router app.
5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.
6. Upgraded parental control and added reward, new scheduler for flexible setting
7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
8. Fixed status page HTML vulnerability. Thanks to David Ward.
9. Fixed CVE-2018-1160. Thanks to Steven Sroba.
10. Fixed cfg_server security issue.

Please unzip the firmware file first then check the MD5 code.
MD5: 8566f55055063a3143a2acad2f14ed77

1. Fixed AiProtection, AiMesh and GUI bugs
2. Improved system stability
3. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
4. Fixed status page HTML vulnerability. Thanks to David Ward.
5. Fixed CVE-2018-1160. Thanks to Steven Sroba.
6. Fixed cfg_server security issue.

Please unzip the firmware file first then check the MD5 code.
MD5: 58aa0454d7dbda957f5fde583267acd8

1. Supported U-NII-4 5.9GHz channels(US only) for reducing interference and improving connection speed.
2. Fixed AiMesh backhaul issue.
3. Fixed Wake-on-LAN issue.
4. Improved system stability.

Please unzip the firmware file first then check the MD5 code.
MD5: b5abd22dec894de311af386a5ab5f212

1. Improved Wi-Fi performance.
2. Improved system stability.
3. Fixed CVE-2022-26376

Please unzip the firmware file first then check the MD5 code.
MD5: d780df84d54a3a2864d4075b5ddce261

1. Fixed AiProtection bugs
2. Fixed IPSec VPN connection issues
3. Fixed Ethernet backhaul connection issues
4. 160MHz throughput optimization
5. Improved system stability

Please unzip the firmware file first then check the MD5 code.
MD5:c7edbe9ea1c0405e2ef9ced21747f707

1. Fixed AiMesh and VPN issues
2. Improved system stability and fixed GUI issue

Please unzip the firmware file first then check the MD5 code.
MD5:b8e3bb1b440ee6c740ced4df385afc0f