Release ASUS RT-AX86U Firmware version (2022/01/11)


New Around Here
2022/01/11 75.31 MBytes
ASUS RT-AX86U Firmware version
- Fixed string format stacks vulnerability
- Fixed cross-site-scripting vulnerability
- Fixed informational vulnerability.
Thanks to Howard McGreehan.

-Fixed SQL injection vulnerability
-Fixed json file traversal vulnerability
-Fixed plc/port file traversal vulnerability
-Fixed stack overflow vulnerability
Thanks to HP of Cyber Kunlun Lab

-Fixed authenticated stored XSS vulnerability
Thanks to Luke Walker – SmartDCC

-Fixed LPD denial of service vulnerability
-Fixed cfgserver heap overflow vulnerability
-Fixed cfgserver denial of service vulnerability
Thanks to TianHe from BeFun Cyber Security Lab.

Added more ISP profile
Digi 1 - TM
Digi 2 - TIME
Digi 3 - Digi
Digi 4 - CTS
Digi 5 - ALLO
Digi 6 - SACOFA
Maxis - CTS
Maxis - SACOFA
Maxis - TNB/ALLO

Fixed AiMesh guest network issues.
Fixed DDNS issues where the WAN IP is IPv6
Fixed UI bugs in Administration --> feedback.
Fixed time zone error.
Improved the connection stability.


Senior Member
auto-updated for me last night, working fine...


Part of the Furniture


Senior Member
Wasn't it in beta firmware only?
It was actually in the release for one build late summer/early fall if memory serves me. But, they took it out the next release due to a problem they didn’t disclose. I’ve never run a beta firmware.


Part of the Furniture
Look at some of the other posts for firmware and you will see people post a link directly to the file from Asus.
Been that way for the 10 years I have been here and most likely before that.
All you have to do is verify the download source when the download window comes up.
The way you do it adds more clicks to get the same result.

View attachment 38532
In the greater scheme of things, it does not matter. Please focus on things that are helpful.


Part of the Furniture
Just because others have been doing things incorrectly, it doesn't matter how long it has gone on, it is still incorrect (if you value your digital security).

I much prefer @OzarkEdge's method to links.


Part of the Furniture
In the interest of safe computing, I prefer to browse to the source page and select the download link myself. So I assume the same for others.


I like it even better that there's an md5 checksum that I can verify. That gives me a nice warm feeling *smile*.


Part of the Furniture


Part of the Furniture
I stated why I believe it is incorrect. You can believe what you like, but what I believe does matter.

The forum is certainly taking a downturn now.


Senior Member
This option can't be called DNSFilter in official Asuswrt. See what DNSFilter is:

That was the speculation as to why it was taken back out, since it was Merlin code that had been added. Regardless it still isn’t there and may not return, which is disappointing.


Part of the Furniture
That was the speculation

Asuswrt already contains RMerlin's code. This function is perhaps coming back with RC3 official release and for selected models, but named differently.

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!