RT-AX59U

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

Fixed the IPTV compatibility issue for Now TV.

1.Fixed the UI issue in Chrome.
2.Enhanced input parameter handling techniques to improve data processing stability and system security.
3.Enhance system access control mechanisms.

1. Improved the stability of AiMesh backhaul connections, resulting in a more robust and reliable mesh network performance.
2. Strengthened input validation and data processing workflows, further protecting your information security.

Please unzip the firmware file, and then verify the checksum.
SHA256: 5d9e0a126515610ac7cfe4f92a02fa03ffe4e37cce8eea9167e72814f807c846

- Resolved an issue where the Traffic Analyzer feature was not functioning properly.

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Please unzip the firmware file, and then verify the checksum.
SHA256: e8ad8b4a89a53b936e85d53072bac38cf26e8711caf58b427c1d822d70ec3e0b

Bug Fixes and Enhancements：
Resolved an issue where the Traffic Analyzer feature was not functioning properly.

Please unzip the firmware file, and then verify the checksum.
SHA256:1ae099aa07ffaa06a798a039c0117defa4d8f362ab467becae4ddcd384652dd9

Bug Fixes and Enhancements：
- Enhanced AiMesh Stability
- Fixed an issue where the RE product ID was not being updated in the AiMesh topology.
- Added DS-Lite Support.
- Corrected a display issue in the OpenVPN server that prevented IPv6 settings from showing correctly.
- Fixed a persistent GUI issue on 'Let's Encrypt Authorization' that displayed 'Authorization' incorrectly.
- Resolved a bug that prevented offline devices from being deleted in the Router App.
- Fixed an issue where the system would reboot due to parental control rules with empty enable fields.

Security updates:
- Addressed CVE-2023-48795 by updating the dropbear SSH server.
- Applied patches for CVE-2023-5678 & CVE-2024-0727
- Improved security in OpenVPN custom configuration.

Please unzip the firmware file, and then verify the checksum.
SHA256: adc347d7b53da23f1a71f857af69dbb071ca36b608dbbce14440b635beddac64

Bug fixes and functionality modifications:
1. Resolved IPTV interruptions during extended use.
2. Addressed Guest Network performance issues with active IPTV.
3. Fixed potential Aura RGB crash.
4. Added eXtra Long Range support for enhanced connectivity.
5. Rectified potential IPV6-related crashes.
6. Improved roaming efficiency for AiMesh nodes under weak signals.
7. Addressed router crashes during WireGuard setup.
8. Fixed abnormal activation status in the Gear Accelerator function UI

Please unzip the firmware file, and then verify the checksum.
SHA256: ba3c8069f1e5747fd9ea984c96926763265f36f26a49af1a8362d1d5676d6752

1. Fixed vpn client related issues.
2. Improve system stability.

Please unzip the firmware file, and then verify the checksum.
SHA256: d161da4f151e84663f5fe692a2dd6ad520ab98b232fe1d1a5b1cc77314266d17

Security:
Fixed command injection vulnerabilities
Fixed remove ookla-IPQ956X
Fixed vulnerability in command injection after authentication
Fixed XSS potentially via malformed hostname in DHCP request
Fixed Fixed Stored Cross Site Scriptin
Fixed XSS attack via EXT3 USB in foldername
Fixed ping '-c' parameter in administration Network Tools is validated only on client side

Feature:
Add OCN Support.
Fixed v6plus related issues.
Fixed AiMesh node under Ethernet backhaul issues.
Fixed GUI bugs while searching for AiMesh Node.
Fixed USB function related issues.

Please unzip the firmware file, and then verify the checksum.
SHA256: 9d0ca28d1f4d506939b99df7b205c7bcc8f333340583f747bdb4693d7e3586f4

1. Imporve system stability.
2. Fix speed issue under QoS.
3. Add Time machine.
4. Fix GUI issues.

Please unzip the firmware file, and then verify the checksum.
SHA256: 6582dbcf307569936088c26e45e56a8102ff7bc4b8d4b30b01bed3ff16958ce0

- Fixed AiMesh related issues.
- Fixed wireless setting related issues.
- Fixed minor GUI issues.
- Supports smart connect.
- Supports more USB functions.
- Supports iPhone tether.

Please unzip the firmware file first then check the MD5 code.
MD5: 1e2e9d190f01aeab93820ae6c8a6ccdc

Initial release

Please unzip the firmware file first then check the MD5 code.
MD5: 068e3299be04c8c45c276d6fcdeea903