1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.

Please unzip the firmware file, and then verify the checksum.
SHA256: 8109b4711ac1cffe9e3c6012435415c88f534f9df6409dc3c71af5cbd945bcc5

Fixed injection vulnerability.

Please unzip the firmware file, and then verify the checksum.
SHA256: 432dc25292ec4e8d417d453b702e6b25432fb5a3aee37958670cf51085033c13

Bug Fixes and Enhancements:
- Added new iptv profile NowTV.
- Resolved AiMesh-related issues to provide stable backhaul connection.
- Resolved GUI issues to ensure that the user interface is even more user-friendly.
- Updated server list of game radar.
- Fixed client traffic monitor card.
- Fixed v6plus related issues.
- Added OCN support.
- Added Ds-Lite support.
- Fixed the registration failure after reboot when using account based DDNS.
- Fixed the issue that did not send report operation after acquiring the MAP rules.
- Fixed getting IPv6 address if setting hinet MOD mesh even DUT disable IPv6.
- Fixed an issue where DHCP discover packets were not being filtered when the hinet MOD mesh IPTV profile was set.
- Fixed offline RE can't be removed successfully.
- Fixed 5GHz WiFi LED control radio disabled case.
- Fixed DDNS server error occurs when registering DDNS with app.-
- Resolved OpenVPN server TAP Mode Issue.
- Corrected a bug encountered when adding a rule to the network services filter.
- Resolved Wi-Fi connectivity issues on Android 14.
- Fixed an issue where the system would reboot when parental control had empty enabled rules for a client.
- Fixed various issues related to AiCloud functionality.

Security Fixes：
- Fixed several curl vulnerabilities.
- Fixed command Injection Issue after authentication.
- Fixed code execution in custom OVPN.
- Fixed CVE-2023-48795, CVE-2023-41913
- Implemented a workaround patch for CVE-2023-5678 & CVE-2024-0727.
- Addressed a stack buffer overflow vulnerability in the WPS method on ASUS router devices to enhance security.
- Fixed command injection vulnerability.
- Fixed the ARP poisoning vulnerability.
- Fixed code execution in custom OVPN.
- Fixed stack buffer overflow in lighttpd.
- Fixed the XSS and Self-reflected HTML injection vulnerability.
*Please be advised that due to a security upgrade in AiMesh, we strongly recommend against downgrading to previous firmware versions, as this may lead to connection issues. Should you encounter any difficulties, resetting the AiMesh router to its default settings and re-establishing the mesh connection can resolve the problem.

Please unzip the firmware file, and then verify the checksum.
SHA256: 2821fd035399dce9c5bc98210324d749ac1c547628f40a92431440071e38e9ef

New features for ASUSWRT 5.0
-Kids' Wi-Fi: Create a separate network specifically for children, complete with scheduled controls. This is suitable for children who use multiple network devices that have enabled the randomized MAC address function and are not easily recognized.
-VPN WiFi: Create a VPN network that connects to 3rd party VPN services or with ASUS site to site -VPN(https://www.asus.com/support/FAQ/1048281/) to encrypts your internet connection and hides your IP address to protect your online activities from being tracked or monitored.
-IoT WiFi : Create an 2.4G spearate network for IoT (Internet of Things) devices.
Guest WiFi: Create a guest network with a WiFi schedule and access rights to control when and how guests can use the network.
-VLAN, allow you to segment a network into smaller, virtual sub-networks, which can be used to isolate traffic, please refer to https://www.asus.com/support/FAQ/1049415/
-Multi-services WAN, create multiple profiles on a single WAN interface. (https://asus.com/support/FAQ/1050072)
-Port isolation and AP isolation to restrict device access to each other.

Bug Fixes and Enhancements
-NowTV profile has been added under new IPTV profiles.
-IPTV settings have been updated for better compatibility with Unifi Biz VoIP service.
-Fixed a GUI bug that occurred when adding port range rules in the Network Service Filter.
-Resolved an issue that caused hostname errors in the DDNS service.

Security Fixes
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Corrected an OpenVPN vulnerability categorized as CWE-134.
-Fixed the Hostap vulnerability CVE-2019-10064.
-Patched a command injection vulnerability to improve overall security.
-Strengthened protection against SSH brute force attacks.

Please unzip the firmware file, and then verify the checksum.
SHA256: f99b310c918cde205cd6f7b2c7f45ae02f7afe896a43d166afb6db8d4f41a764

Bug fixes and functionality modifications:
-The ARP response issue has been resolved, along with the connection issue between the router and the ROG Phone 6 and 7.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node
-Resolved the Download Master login issue. Please click the update link in the USB Application to update it.

Security updates:
-Fixed the cfg server vulnerability. Thanks to Swing and Wang Duo from Chaitin Security Research Lab.
-Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087. Thanks to Swing and Wang Duo from Chaitin Security Research Lab C0ss4ck from Bytedance Wuheng Lab, Feixincheng from X1cT34m.

Please unzip the firmware file, and then verify the checksum.
SHA256: af33eab328a4247d72299835d3e11ca4fda80f7206e4aaa331c7737b35b29d40

New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN

-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN

-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS

Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
-Fixed the issue where Traffic Analyzer sometimes couldn't record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Fine-tuned the description for port status.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Modified the USB application option text in dual WAN.
-Allowed WireGuard Server clients to access the Samba server.
-Fixed memory leak issue.
-Enabled the failback function when using the iOS/Android USB backup WAN.

Security updates:
-Enabled and supported ECDSA certificates for Let's Encrypt.
-Enhanced protection for credentials.
-Enhanced protection for OTA firmware updates.
-Fixed DoS vulnerabilities in firewall configuration pages. Thanks to Jinghe Gao's contribution.
-Fixed DoS vulerabilities in httpd. Thanks to Howard McGreehan.
-Fixed information disclosure vulnerability. Thanks to Junxu (Hillstone Network Security Research Institute) contribution.
-Fixed CVE-2023-28702 and CVE-2023-28703. Thanks to Xingyu Xu(@tmotfl) contribution.
-Fixed null pointer dereference vulnerabilities. Thanks to Chengfeng Ye, Prism Research Group - cse hkust contribution.

Please unzip the firmware file, and then verify the checksum.
SHA256: c58322f85f48f3448d34043839351f8003f9810cef4fb1c11d8429dfefe7e2f6