This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.
https://www.asus.com/support/faq/1057454/

Security Fixes
• Web management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.
• Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.
• System protection service: Adjusted address parameter validation and event logging, strengthening access control between local services.
• Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.
• Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.
• Web management interface: Adjusted the output handling of feedback content.
• Notification service: Added identity verification for local connection sources and tightened the related file permission settings.
• Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.
• Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.
• AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.
• System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.
• Network diagnostic data query: Strengthened value range checks for time interval parameters.
• Network diagnostic data query: Added allowlist validation for query fields.
• Internal data query: Improved field matching logic and optimized the memory release process under error conditions.
• Time synchronization settings: Strengthened parameter validation for the server name.
• File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.
• Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.
• Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.
• System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.
• VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.

We recommend updating to this version to maintain optimal protection.

- Fixed abnormal wireless scan behavior under WISP mode.
- Fixed abnormal connection behavior under WISP mode.

Security Enhancements
1. Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
2. HTTPS on 8443 – Management interface now served over TLS by default.
3. UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
4. AiCloud Authentication Hardening (CWE-287) – Added layered verification.
5. Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
6. Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
7. Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
8. Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
9. Detailed Audit Trails – Expanded logging within the authentication module.

Feature improvment:
1. Add Home/Travel mode, easily swap between different profiles like at home as mesh node and wisp mode while traveling, please refer to: https://www.asus.com/support/faq/1051452/
2. Improved WiFi reconnect mechanism, click "Change Network" on network map to quickly swap from different parent WiFi network with up to 5 saved SSIDs.

Bug fixes:
1. Fixed abnormal client list.
2. Fixed abnormal GUI behavior of Wireguard VPN.
3. Fixed USB internet backup conflict with main WAN.
4. Fixed AdGuard DNS GUI issues.
5. Fixed IPv6 related issues.
6. Improved USB tether compatibility for pixel phones.

1. Fixed the UI issue in Chrome.
2. Enhanced input parameter handling techniques to improve data processing stability and system security.
3. Enhance system access control mechanisms.

Please unzip the firmware file, and then verify the checksum.
SHA256: f2857f9bc4cef643aeddfac87ffb3f6eef5db1b1fd56ea479f989d13c88c184f

Security:
Strengthened input validation and data processing workflows to further protect information security.
Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
Enhanced device security through improved buffer handling in connection features.
Refined data handling processes, ensuring secure and accurate information management.
Enhanced file access control mechanisms, promoting a more secure operating environment.
Strengthened certificate protection, providing enhanced data security.

Feature:
Fixed WiFi scan list abnormal.
Fixed USB tether abnormal.

- Add NordVPN in VPN fusion, for more information please refer to: https://www.asus.com/support/FAQ/1051215/
- Ad CyberGhost VPN in VPN Fusion, for more information please refer to: https://www.asus.com/support/FAQ/1051645
- Add adguard in Parental control, for more information, please refer to: https://www.asus.com/support/FAQ/1051213/
- Fixed GUI bugs.

Please unzip the firmware file, and then verify the checksum.
SHA256: 78e0f3f15392b9aae44934cfe5824ed39a954e8e0f1d33e86c8b555554d56e0d

- Fixed unable connecting to wireless network with special character under public Wi-Fi mode (WISP).

Please unzip the firmware file, and then verify the checksum.
SHA256: dd0ebce66aec1eb6c0243a0a0db4a65a98af2ab4b71c57b9e0fa52d6ad20a465

1. Supports FreeWiFi (Captive portal).
2. Fixed IP address issue while switching from repeater mode to router mode.
3. Fixed Go cannot connect to WPA2/WPA3 mixed mode WiFi network under WISP mode.
4. Fixed roaming issue while using AiMesh.
5. Fixed GUI bugs.

Please unzip the firmware file, and then verify the checksum.
SHA256: 9134e170dca2af537ad3d38219712f0408a0e8b3cd0184ea78871b32db041553

Initial firmware release

Please unzip the firmware file, and then verify the checksum.
SHA256: a242f477ad3e42b01cd0ca6b83e8634cd14b075b50df45e69d8edb5adf43732e