ASUS ZenWiFi BT10

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

1. Improved AiMesh stability.
2. Improved compatibility with Apple N1.
3. Minor GUI bug fixes.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.

Bug Fixes:
- Fixed abnormal client list.
- Fixed abnormal GUI behavior of Wireguard VPN.
- Fixed USB internet backup conflict with main WAN.
- Fixed abnormal WAN detection while AiDetection is enabled.
- Improved AdGuard DNS GUI issues.
- Fixed IPv6 related issues.
- Improved USB tether compatibility for pixel phones.

Applied Broadcom patch to resolve a potential 5 GHz Wi-Fi vulnerability that, in rare cases, could trigger temporary disconnections for connected devices; updating ensures normal operation and enhanced protection.

Bug Fixes and Enhancements:
Fixed Ipsec VPN related issues.
Improved Wireless compativity.
Add more localized internet connection types support.

Security:
Implemented a security patch to address an OpenVPN issue.

Security:
1.Enhanced input parameter handling techniques to improve data processing stability and system security.
2.Enhance system access control mechanisms.


Bug Fixes and Enhancements：
1. Enhanced Client Connection Stability.
2. WPA Encryption Settings Update. Added new configuration options for WPA encryption, including the option to select AES for improved client compatibility. This setting can be found under "Network > Main Network".
3. Improved AiMesh Backhaul Compatibility.