Asuswrt-Merlin 3006.102.7 Beta 1 is now available for supported models. The focus of this release is the removal of AiCloud (for security reasons), components upgrade, and a GPL update for the GT-BE19000AI (as its initial release was based on a fairly early GPL version).
Changes since 3006.102.6:
Please keep discussions on this specific beta release.
Downloads are here.
Changelog is here.
Changes since 3006.102.6:
Code:
3006.102.7 (xx-xxx-2026)
- NOTE: AiCloud has been removed from Asuswrt-Merlin due
to its poor security track record. This also includes
cloud syncing features such as Asuswebstorage or
Dropbox syncing with USB folder. Use a VPN if you
need secure remote access to your data.
- UPDATED: Merged GPL 102_40399 (GT-BE19000AI only)
- UPDATED: OpenVPN to 2.6.19.
- UPDATED: Dropbear to 2025.89.
- UPDATED: nettle to 3.10.2.
- UPDATED: dnsmasq to 2.93-test2 (includes a couple of DNSSEC
fixes over 2.92)
- UPDATED: openssl-3.0 to 3.0.19 (GT-BE19000AI only)
- UPDATED: tor to 0.4.8.22.
- CHANGED: Added new 2024 DNSSEC trust anchor, which will
start being used in October 2026.
- FIXED: IPv6 blocking of DoT servers (dave14305)
- FIXED: Multiple minor CVE for OpenSSL 1.1: CVE-2025-68160,
CVE-2025-69418, CVE-2025-69419, CVE-2025-69420,
CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
(backports by RSDNTWK)
- FIXED: Missing UPnP settings on models with multiservice
WAN support.
- FIXED: ntpd options missing when operating in WISP mode.
- REMOVED: AiCloud support, due to security reasons.
Please keep discussions on this specific beta release.
Downloads are here.
Changelog is here.