Release ASUS ROG Rapture GT-AXE16000 Firmware version 3.0.0.6.102_36422 (2025/10/28)

[fruitcornbread]

Version 3.0.0.6.102_36422
61.95 MB
2025/10/28

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

ZIP SHA-256 : F92CF018D0778EA3A78A104EE81637398CC60CA67EA7AFD082B7C902DAB17079
FW SHA-256: b26e742fdf88f8ea238f8f1fabc4ff751ee9095be976bc8990479450128c17d8

Download: https://dlcdnets.asus.com/pub/ASUS/...00610236422.zip?model=ROG Rapture GT-AXE16000

ROG Rapture GT-AXE16000

Quad-band WiFi 6E gaming router, new 6 GHz band, dual 10G ports, 2.5G WAN port, dual WAN, AiMesh support, VPN Fusion, Triple-level game acceleration and free network security

rog.asus.com

 

[jzchen]

I'm going to keep Merlin running because it has a higher GPL merge. (Did I say that correctly)?

 

[opq]

Yeah, this release doesn’t seem to include any of the changes eg Security Enhancements they rolled out to other models in August..

Even the ET8 (still on 3.0.0.4.388) in August got the security enhancements…

Edit: But weirdly does have October changes from other models… did they just miss a release?

 

[fruitcornbread]

I think one way of checking is try changing the router password because of the new policy below for the August firmware especially for other routers. However, I'm not sure if ASUS made any changes to it afterwards in this current October firmware update.

- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.

On an unrelated note, Merlin loosened the new passwords rules slightly in Asuswrt-Merlin 388.10

- NOTE: Asus has made some security related changes. Password requirements are stricter, and UPNP is no longer enabled by default. New password rules were slightly loosened for Asuswrt-Merlin, repeating characters are still allowed.

 

[opq]

Updated and things are generally reliable on my end.

Have not had a chance to change the router password yet to test if the August changes are included in this October release.

Anyone else use their router as a VPN server, and notice that VPN clients connecting to the router's VPN server no longer generates any System Log entries?

 

[drabisan]

Yeah, this release doesn’t seem to include any of the changes eg Security Enhancements they rolled out to other models in August..

Even the ET8 (still on 3.0.0.4.388) in August got the security enhancements…

Edit: But weirdly does have October changes from other models… did they just miss a release?

Considering the flood of "strenghtening" across all platforms, it's a safe guess this is a fix for a to-be-announced 0day.
And you're right, some platforms got some new enhancements back in Aug/Sep. Likely time for AXE16000 will come to add those.
But for now they had to bump up the security fixes.

 

[Squididdle Do]

I've started to experience issues with the router permanently dropping my connections after this upgrade. I have to reboot the router to allow my devices to connect again.

UPDATE: I have a hypothesis to explain my issue. My router wasn't well ventilated. I re-positioned it to have better air flow and the drops have stopped. Here's my theory: the new firmware causes the router to run significantly hotter than the previous versions, and the increase in temperature was causing malfunctions. The router had been in the same position for a long time before the problem started occurring immediately after the update. For the time bearing, things have been stable for several days now with better air flow.

 

[tgd]

A GT-AXE16000 which was a node with another (same as router) is lost 2 days after the upgrade ... perhaps has nothing to do with the upgrade but suddenly lost all connections ... tried to reset it but it won't start again ... only led 1 and 3 are lit and power semi-lit ...

 

[jzchen]

A GT-AXE16000 which was a node with another (same as router) is lost 2 days after the upgrade ... perhaps has nothing to do with the upgrade but suddenly lost all connections ... tried to reset it but it won't start again ... only led 1 and 3 are lit and power semi-lit ...

This is a true bummer to read of this happening. Back in 2023 when ASUSwrt 5.0 was beta (starting with a 9) I had my AXE16000 running as main router and I'd be woken around 3 am local time by our Ethernet based home alarm screaming it had lost connection to the monitoring station. One of these betas dropped all Ethernet connections and I had to flash firmware over WiFi to recover.

I received my BE98 Pro 11/30 of that year, and wanted to try to help debug the 9.0.0.6 firmware some (big gap before another beta release), prior to switching the AXE16000 to a node: one more 3 am experience and that was the end of me trying, (either that or lost all Ethernet immediately I can't remember now)...

 

[tgd]

This is a true bummer to read of this happening. Back in 2023 when ASUSwrt 5.0 was beta (starting with a 9) I had my AXE16000 running as main router and I'd be woken around 3 am local time by our Ethernet based home alarm screaming it had lost connection to the monitoring station. One of these betas dropped all Ethernet connections and I had to flash firmware over WiFi to recover.

I received my BE98 Pro 11/30 of that year, and wanted to try to help debug the 9.0.0.6 firmware some (big gap before another beta release), prior to switching the AXE16000 to a node: one more 3 am experience and that was the end of me trying, (either that or lost all Ethernet immediately I can't remember now)...

I wish I was able to recover ... nothing seems to be working on this GT-AXE16000 anymore ...

 

[jzchen]

I wish I was able to recover ... nothing seems to be working on this GT-AXE16000 anymore ...

So you have 2 running as router and node, but one is running?

 

[tgd]

So you have 2 running as router and node, but one is running?

yes ... the router is fine ... just the node died ...

 

[jzchen]

The reason I asked is it may be safer to run the current Merlin on it:

 

[jzchen]

BTW- The check for updates is cool it actually checks Merlin's servers too. (It failed to update Merlin firmware but close enough, I knew to go and check/get the new versions).

 

[tgd]

The reason I asked is it may be safer to run the current Merlin on it:
View attachment 68844

Thank you for the suggestion ... I will probably try that ... but it seems to be working without any problem ...

 

[jzchen]

yes ... the router is fine ... just the node died ...

Did you try to get into Rescue Mode on the dead one?:

[Wireless Router] How to use Rescue Mode (Firmware Restoration)? | Official Support | ASUS USA

 

[tgd]

Did you try to get into Rescue Mode on the dead one?:

[Wireless Router] How to use Rescue Mode (Firmware Restoration)? | Official Support | ASUS USA

yes I have tried that also ... it does not get into rescue mode ... nothing happens no matter how long I press the reset key also ... just led 1 and 3 are lit and the power led semi-lit ... very strange behavior ... I will call asus support to report it ...