RT-BE3600

This version of firmware is only applicable to RT-BE3600 of HW Ver: 2.0. please check the model name from the product SN label or box label before utilizing.
Improvements:

Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
Refined accessibility-related UI and interaction details.
Improved overall remote connection stability.
Improved system behavior when using System diagnostic on feedback page.
Bug Fixes:

Fixed incorrect connection status display for certain Wi-Fi devices.
Fixed AiMesh nodes not displayed correctly in the device list.
Fixed a disconnection issue that occurred after enabling the MAC Filter.
Fixed main network connectivity issue when enabling IPv6 for both the main network and Smart Home Master.
Security Enhancements:

Strengthened input sanitization mechanism.
Enhanced system API validation for stronger protection consistency.
Strengthened command handling and system resource access controls.
Improved system logging and security event recording mechanisms.

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Improvements:
Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.
Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.
Refined accessibility-related UI and interaction details.
Improved overall remote connection stability.
Improved system behavior when using System diagnostic on feedback page.

Bug Fixes:
Fixed incorrect connection status display for certain Wi-Fi devices.
Fixed AiMesh nodes not displayed correctly in the device list.
Fixed a disconnection issue that occurred after enabling the MAC Filter.
Fixed main network connectivity issue when enabling IPv6 for both the main network and Smart Home Master.

Security Enhancements:
Strengthened input sanitization mechanism
Enhanced system API validation for stronger protection consistency.
Strengthened command handling and system resource access controls.
Improved system logging and security event recording mechanisms.

This version of firmware is only applicable to RT-BE3600 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Fixed unstable connections for some WiFi devices during roaming.
- Resolved issues where certain AiMesh nodes could not connect properly.
- Fixed PPPoE, IPv6, and subnet configuration issues that caused login or address assignment errors.
- Corrected display issues on the Web History page.
- Improved overall system stability and user experience.
- Security enhancements.

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to RT-BE3600 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.
Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Applied Broadcom patch to resolve a potential 5 GHz Wi-Fi vulnerability that, in rare cases, could trigger temporary disconnections for connected devices; updating ensures normal operation and enhanced protection.

This version of firmware is only applicable to RT-BE3600 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Initial firmware release

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Implemented a security patch to address an OpenVPN issue.
- Fixed display issues that could occur during the login process.
- Fixed a potential DNS Open Resolver vulnerability.
- Fixed a problem affecting 5 GHz connections when operating in repeater mode.
- Fixed an anomaly in the wireless scheduler functionality.
- Fixed an issue preventing the configuration of time scheduling for the SDN client.
- Fixed an issue causing Movistar IPTV to malfunction due to incorrect firewall rules.
- Improved network stability to prevent connectivity loss after long usage.
- Improve 5G WiFi connection stability
- Improved compatibility with IoT devices when using WPA2+WPA3 security protocols.
- Improved the stability and performance of remote connections via the app.
- Enhanced the stability of MLO (Multi-Link Operation) connections.

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Enhanced input parameter handling techniques to improve data processing stability and system security.
2. Enhance system access control mechanisms.

This version of firmware is only applicable to RT-BE3600 of HW Ver: A1, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.
*Please be advised that due to an architecture upgrade in AiMesh, we highly discourage downgrading to earlier firmware versions as it may result in connectivity problems. If you experience any difficulties, we suggest resetting the AiMesh router to its default settings and re-establishing the mesh connection.

New features:
- New "Network" page to consolidate main network and Guest network/Smart Home Master for simplified management.

Bug Fixes and Enhancements：
- Improved AiMesh backhaul stability.
- Improved system stability and fixed Smart Home Master GUI issues.
- Optimized memory management mechanisms, improving system efficiency and stability.
- Strengthened input validation and data processing workflows, further protecting your information security.
- Improved web rendering engine, enhancing browsing experience and security.
- Enhanced security of system command processing to guard against potential malicious operations.
- Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.

Please unzip the firmware file, and then verify the checksum.
SHA256: dc38a001f6dea8f84d2ceaafeafda65df5b69c10cd95b658781bd6d8b6f4cc80