This version of firmware is only applicable to ASUS ZenWiFi AX (XT8)of HW Ver: 2.0. please check the model name from the product SN label or box label before utilizing.


This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.
https://www.asus.com/support/faq/1057454/

Supports Surfshark VPN account login for a smoother user experience. (Supported model only)

Fixed an issue that could cause DNS resolution failures and loss of Internet access when DNSSEC is enabled.

Security Fixes
Web management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.
Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.
System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.
Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.
Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.
Web management interface: Adjusted the output handling of feedback content.
Notification service: Added identity verification for local connection sources and tightened the related file permission settings.
Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.
Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.
AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.
System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.
Network diagnostic data query: Strengthened value range checks for time interval parameters.
Network diagnostic data query: Added allowlist validation for query fields.
Internal data query: Improved field matching logic and optimized the memory release process under error conditions.
Time synchronization settings: Strengthened parameter validation for the server name.
File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.
Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.
Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.
System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.
VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.

We recommend updating to this version to maintain optimal protection.

This version of firmware is only applicable to ASUS ZenWiFi AX (XT8)of HW Ver: 1.0. please check the model name from the product SN label or box label before utilizing.


This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.
https://www.asus.com/support/faq/1057454/

Supports Surfshark VPN account login for a smoother user experience. (Supported model only)

Fixed an issue that could cause DNS resolution failures and loss of Internet access when DNSSEC is enabled.

Security Fixes
Web management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.
Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.
System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.
Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.
Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.
Web management interface: Adjusted the output handling of feedback content.
Notification service: Added identity verification for local connection sources and tightened the related file permission settings.
Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.
Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.
AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.
System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.
Network diagnostic data query: Strengthened value range checks for time interval parameters.
Network diagnostic data query: Added allowlist validation for query fields.
Internal data query: Improved field matching logic and optimized the memory release process under error conditions.
Time synchronization settings: Strengthened parameter validation for the server name.
File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.
Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.
Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.
System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.
VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.

We recommend updating to this version to maintain optimal protection.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads - external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Improved data-display handling in a web function to enhance browsing security.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0. please check the model name from the product SN label or box label before utilizing.


Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads - external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Improved data-display handling in a web function to enhance browsing security.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

This version of firmware is only applicable to ASUS ZenWiFi AX (XT8)of HW Ver: 1.0. please check the model name from the product SN label or box label before utilizing.
Security Fixes
Enhanced DNS Handling: Improved DNS name processing to address potential memory issues that could occur in rare cases during name format conversion, enhancing system security and robustness.
Strengthened Execution Module Safeguards: Improved protections for system execution modules to reduce the risk of unauthorized substitution during specific processes.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0. please check the model name from the product SN label or box label before utilizing.
Security Fixes
- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.
- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Addressed multiple security weaknesses in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Fixed a privilege escalation vector in the IFTTT token exchange mechanism
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Addressed multiple security weaknesses in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Fixed a privilege escalation vector in the IFTTT token exchange mechanism
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.


Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Improved compatibility with certain IoT devices.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Improved compatibility with certain IoT devices.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.

Please unzip the firmware file, and then verify the checksum.
SHA256: 60d0449fceeba111c5d5138b639446a5993dad8bb6f8c267d8a4d844b882bfd6

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Release note:
1.Strengthened input validation and data processing workflows to further protect information security.
2.Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3.Enhanced device security through improved buffer handling in connection features.
4.Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

This version of firmware is only applicable to ZenWiFi XT8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Please unzip the firmware file, and then verify the checksum.
SHA256: 3b504fb01fb135ca590c90c459ab0f85bbead5135f681d2c8e5fbd4ab90142dd