New Features
- New Time Zone Options: Added "Vancouver, Whitehorse (PST7)" and "Edmonton, Yellowknife (MST6)" time zone options for Canada.

Bug Fixes and Enhancements
- Improved stability during the AiMesh node setup process.
- Strengthened firewall rule configuration for UPnP, improving port-forwarding stability and firewall rule restoration reliability.

Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

Security Fixes
- Enhanced system security by addressing an unsafe remote script execution mechanism in.
- Improved system security by addressing a heap buffer overflow vulnerability during cache handling.
We recommend upgrading to this version to ensure up-to-date protection.

Improvements:
- Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
- Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
- Refined accessibility-related UI and interaction details.
- Improved overall remote connection stability.

Security Enhancements:
- Strengthened input sanitization mechanism
- Enhanced system API validation for stronger protection consistency.
- Strengthened command handling and system resource access controls.
- Improved system logging and security event recording mechanisms

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

Improved compatibility with certain IoT devices.

1. Enhanced input parameter handling techniques to improve data processing stability and system security.
2. Enhance system access control mechanisms.

1. Fixed UI compatibility issues with the latest Chrome.
2. Fixed client binding issues in Mesh scenarios.

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Please unzip the firmware file, and then verify the checksum
SHA256: a62c078edd02c0cd4e5fa54e7ee6ce0236b35c57da41b6b760b30a896e637860

Bug Fixes and Enhancements：
- Enabled DynDNS and No-IP DDNS to use IPv6.
- Enabled WireGuard Server clients to access the Samba server.
- Enabled the failback function when using the iOS/Android USB backup WAN.
- Improved AiMesh backhaul stability.
- Improved Wireguard performance.
- Improved consistent display of client status on the WireGuard server.
- Improved stability when enabling or disabling the WireGuard server.
- Improved system stability when accessing the WireGuard Server with DMZ enabled.
- Improved memory utilization and fixed an occasional server error when registering DDNS with an app.
- Modified the USB application option text in dual WAN.
- Fixed network map bugs.
- Fixed memory leak issue.
- Fixed v6plus related Issues.
- Fixed ipv6 network service filter not work.
- Fixed the IPsec VPN compatibility issue with Win10.
- Fixed the reboot issue when assigning specific clients in VPN fusion.
- Fixed Client DOM Stored XSS vulnerability.
- Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
- Fixed the problem that the AiCloud app cannot add router on Android 9.
- Fixed the issue where Traffic Analyzer sometimes couldn't record data.
- Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
- Fixed AiMesh preferred AP identification in site survey results.
- Fixed a bug encountered when adding a rule to the network services filter.
- Fine-tuned the description for port status.
- Resolved the issue with login and password changes.
- Resolved the IPSec VPN connection issues.
- Resolved OpenVPN Server TAP Mode Issue.
- Resolved the Instant Guard connection issues.
- Resolved an issue that caused hostname errors in the DDNS service.
- Resolved the ARP response issue, along with the connection issue between the router and the ROG Phone 6 and 7.
- Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node.

Security updates:
- Enabled and supported ECDSA certificates for Let's Encrypt.
- Enhanced protection for credentials.
- Enhanced protection for OTA firmware updates.
- Enhanced protection against SSH brute force attacks.
- Fixed CVE-2022-46871.
- Fixed Client DOM Stored XSS.
- Fixed DoS vulnerabilities in httpd and firewall configuration pages.
- Fixed information disclosure vulnerability.
- Fixed null pointer dereference vulnerabilities.
- Fixed the cfg server vulnerability.
- Fixed FFmpeg vulnerabilities.
- Fixed OpenSSL vulnerabilities.
- Fixed several curl vulnerabilities.
- Fixed CVE-2023-28702 and CVE-2023-28703.
- Fixed an OpenVPN vulnerability categorized as CWE-134.
- Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
- Fixed security issues on the status page.

Please unzip the firmware file, and then verify the checksum.
SHA256: 40e0542072bf383edf67c28f4463d6b5c7e8b8234be547d0b72e2ad7626d2268

1. Supported WireGuard VPN server and client.
2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.
3. Supported new devices connection notification.
4. Supported connection diagnostic on the ASUS router app.
5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.
6. Upgraded parental control and added reward, new scheduler for flexible setting
7. Fixed USB icon issue in port status.
8. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
9. Fixed status page HTML vulnerability. Thanks to David Ward.
10. Fixed CVE-2018-1160. Thanks to Steven Sroba.
11. Fixed cfg_server security issue.
12. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-1000494.
13. Fixed IPSec server vulnerability, CVE-2022-40617.
14. Improved connection speed with Verizon FIOS.
15. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net.

Please unzip the firmware file first then check the MD5 code.
MD5: fa6be22b3dd95ad769b55496b5570eb1

1.Improved system stability
2.Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
3.Fixed status page HTML vulnerability. Thanks to David Ward.
4.Fixed CVE-2018-1160. Thanks to Steven Sroba.
5.Fixed cfg_server security issue.

Please unzip the firmware file first then check the MD5 code.
MD5: 1a7934d46f66b17119425320bab04d64

1. Fixed OpenSSL CVE-2022-0778
2. Fixed CVE-2021-34174
3. Added more security measures to block malware.
4. Fixed Stored XSS vulnerability. Thanks to Milan Kyselica of IstroSec.
5. Fixed CVE-2022-23970, CVE-2022-23971, CVE-2022-23972, CVE-2022-23973, CVE-2022-25595, CVE-2022-25596, CVE-2022-25597, CVE-2022-26376
6. Added 3rd party DNS server list in WAN --> DNS to help users enhance the connection security.
7. Supported Safe Browsing in the router app to filter explicit content from search results. You can set it in the router app --> Devices or Family.
8. Improved system stability.

Please unzip the firmware file first then check the MD5 code.
MD5: 1921dd988466f2a81e865f8b3b665ef1

Security
- Fixed string format stacks vulnerability
- Fixed cross-site-scripting vulnerability
- Fixed informational vulnerability.
Thanks to Howard McGreehan.

-Fixed SQL injection vulnerability
-Fixed json file traversal vulnerability
-Fixed plc/port file traversal vulnerability
-Fixed stack overflow vulnerability
Thanks to HP of Cyber Kunlun Lab

-Fixed authenticated stored XSS vulnerability
Thanks to Luke Walker – SmartDCC

-Fixed LPD denial of service vulnerability
-Fixed cfgserver heap overflow vulnerability
-Fixed cfgserver denial of service vulnerability
Thanks to TianHe from BeFun Cyber Security Lab.

Added more ISP profile
Digi 1 - TM
Digi 2 - TIME
Digi 3 - Digi
Digi 4 - CTS
Digi 5 - ALLO
Digi 6 - SACOFA
Maxis - CTS
Maxis - SACOFA
Maxis - TNB/ALLO

Fixed WAN connection bug.
Fixed AiProtection bug.
Fixed AiMesh guest network issues.
Fixed DDNS issues where the WAN IP is IPv6
Fixed UI bugs in Administration --> feedback.
Fixed time zone error.
Fixed v6plus related issues.
Improved the connection stability.

Please unzip the firmware file first then check the MD5 code.
MD5:6952fbeff1e4feed2711de16ad5588f6

1. Fixed Let's encrypt related bugs.
2. Fixed httpd and Cfg server DoS vulnerability
Thanks to Wei Fan from NSFOCUS GeWuLAB.
3. Fixed stack overflow vulnerability
4. Fixed DoS vulnerability
Thanks to Fans0n, le3d1ng, Mwen, daliy yang from 360 Future Security Labs

Please unzip the firmware file first then check the MD5 code.
MD5:93f924e91b71a3e7ece4d8713f665e5f

This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

2.Fixed Let's encrypt issues.
3.Fixed Stored XSS vulnerability.
4.Fixed CVE-2021-41435, CVE-2021-41436.
Thanks to Efstratios Chatzoglou, University of the Aegean
Georgios Kambourakis, European Commission at the European Joint Research Centre
Constantinos Kolias, University of Idaho.
5.Fixed Stack overflow vulnerability. Thanks to Jixing Wang (@chamd5) contribution.
6.Fixed information disclosure vulnerability .Thanks to CataLpa from DBappSecurity Co.,Ltd Hatlab and Yao Chen(@ysmilec) of 360 Alpha Lab contribution.
7. Fixed WAN DNS setting cannot setup LAN side pihole server.
8. Fixed DoS vulnerability from spoofed sae authentication frame. Thanks for Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.
9. Fixed envrams exposed issue. Thanks to Quentin Kaiser from IoT Inspector Research Lab contribution.

Please unzip the firmware file first then check the MD5 code.
MD5: 0eb15e1ddeaafad0d2cee4e7d7b26e96

- Fix AiMesh related issues.
- Fix Let's encrypt related issues.

Please unzip the firmware file first then check the MD5 code.
MD5: f67ae60bd79ea93f84a5c03bd334a912

- Fixed DoS vulnerability. Thanks for Tsinghua University NISL's contribution.
- Fixed Chromecast compatibility issues
- Fixed CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686
- Fixed the fragattacks vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: 472f6f482182edfcea769fd2bc36ff21

1. Bugs Fixed
2. New Family interface in ASUS router App.
ASUS Router App for iOS must greater or equal to iOS v1.0.0.5.75
Android version greater or equal to v1.0.0.5.74


Please unzip the firmware file first then check the MD5 code.
MD5: b99baf011dd898b828ea7e2df475d328

- Initial Release

Please unzip the firmware file first then check the MD5 code.
MD5: d768aacd35910001cc6eb7f18f3a635c