Other Asuswrt-Merlin 3006.102.7

3006.102.7 (22-Feb-2026)
- NOTE: AiCloud has been removed from Asuswrt-Merlin due
to its poor security track record. This also includes
cloud syncing features such as Asuswebstorage or
Dropbox syncing with USB folder. Use a VPN if you
need secure remote access to your data.

- UPDATED: Merged GPL 102_40399 (GT-BE19000AI only)
- UPDATED: OpenVPN to 2.6.19.
- UPDATED: Dropbear to 2025.89.
- UPDATED: nettle to 3.10.2.
- UPDATED: dnsmasq to 2.93-test2 (includes a couple of DNSSEC
fixes over 2.92)
- UPDATED: openssl-3.0 to 3.0.19 (GT-BE19000AI only)
- UPDATED: tor to 0.4.8.22.
- CHANGED: Added new 2024 DNSSEC trust anchor, which will
start being used in October 2026.
- FIXED: IPv6 blocking of DoT servers (dave14305)
- FIXED: Multiple minor CVE for OpenSSL 1.1: CVE-2025-68160,
CVE-2025-69418, CVE-2025-69419, CVE-2025-69420,
CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
(backports by RSDNTWK)
- FIXED: Missing UPnP settings on models with multiservice
WAN support.
- FIXED: ntpd options missing when operating in WISP mode.
- FIXED: TrendMicro signatures not updating on RT-BE58_Go.
- FIXED: Starting a client through VPNDirector would fail to
update routing rules.
- REMOVED: AiCloud support, due to security reasons.

3006.102.6 (25-Nov-2025)
- NOTE: Asus has made some security related changes. Password
requirements are stricter, and UPNP is no longer
enabled by default. New password rules were
slightly loosened for Asuswrt-Merlin, repeating
characters are still allowed.
- NOTE: For developers, the Tomato legacy files (tm*.*)
are no longer included with the webui. Please
update your addon pages accordingly.

- NEW: Added support for the RT-BE58_Go.
- NEW: Added support for the GT-BE19000AI.
- NEW: Redesigned Traffic Monitor pages.
- Uses Chart.js for Realtime and Last24 pages
- Removes legacy Tomato code
- Last 24 can be zoomed in and panned (mouse wheel
and pinch-to-zoom gestures are both supported)
- Realtime and Last 24 now show as bits/s instead
of bytes/s
- Settings moved from the tab to the dropdown menu
- Removed NVRAM database location option and added
JFFS. Also removed rarely used start-of-month
setting.

- UPDATED: Merged GPL 38978 (RT-BE58_GO only)
- UPDATED: Merged GPL 40103 (GT-BE19000AI only)
- UPDATED: Merged GPL 39099 (other Wifi 7 models)
- UPDATED: Merged GPL 37351 (Wifi 6 models)
- UPDATED: OpenVPN to 2.6.16.
- UPDATED: libcap-ng to 0.8.4 (to be in sync with upstream)
- CHANGED: TrafficMonitor stats can now be saved to JFFS,
and removed support for saving to NVRAM.
- REMOVED: outdated setuprsa.sh script.
- FIXED: IPv6 requests for prefix lengths other than 64 for
routers with Multiwan support.
- FIXED: CVE-2025-9230 in OpenSSL (backport by RSDNTWK).
- FIXED: Client name would be missing on the Wireless Log
page if the MAC was missing in the DHCP lease list
(for static clients for example)
- FIXED: OpenSSL 1.1.1 would prioritize CHACHA20 over AES
on BCM4916 devices
- FIXED: MU-MIMO couldn't be disabled on some models.

3006.102.5 (3-Aug-2025)

- NEW: Completely redesigned System Log -> Connections page.
- You can now filter the list
- You can set the page to auto-refresh itself
- Public IP addresses can be looked up on
WhatismyIPaddress.com
- Local hostnames will be resolved and shown
- Routed IPv6 connections will be shown

- UPDATED: Merged GPL 3006.102_37957 for Wifi 6 devices.
- UPDATED: Merged GPL 3006.102_38757 for WIfi 7 devices.
- UPDATED: dropbear to 2025.88.
- CHANGED: Replaced netstat-nat by a fork called netstat-nat-ng.
This fork fixes a number of issues with IPv6 and
field size.
- CHANGED: Updated Control-D DoT server entries (dave14305).
- CHANGED: Optimized performance when refreshing the Sysinfo
page on a network with thousands of tracked
connections.
- CHANGED: Modified the Quick Internet Setup wizard so not
to attempt downloading firmware updates from Asus
(which would fail anyway).
- FIXED: OpenVPN server set to "Internet only" would fail to
block LAN access (invalid firewall rule from SDN was
bypassing it).
- FIXED: DNSDirector "Router" mode would not always work properly
with IPv6 (now uses REDIRECT instead of DNAT, which was
backported from iptables 1.4.19).
- FIXED: DNSDirector would try to create iptables rules even
when that SDN should not allow DNSDirector if it shares
the main LAN interface. This could break DNSDirector
on the main network.
- FIXED: Status frame missing from Network Map when accessing
the router under certain hostnames.
- FIXED: Wireless Settings page failing to save on some models
when in an AiMesh setup.

- NOTE: If migrating from a 3004 firmware, only the first Guest
Network will be migrated - any additionnal GN must be
manually reconfigured.
- NOTE: If migrating from a 3004 firmware, the Wireless Scheduler
will need to be manually reconfigured if you were using
it.
- NOTE: As a reminder, the ROG variant of the webui is not
supported in the 3006 firmware series, as maintaining
two separate interfaces is too much extra work.
- NOTE: Due to numerous webui changes, it's recommended to
force refresh the page after first login, or clear
your browser cache.

- NEW: Moved RT-AX86U_PRO, RT-AX88U_PRO, ZenWifi Pro XT12,
GT-AX6000, GT-AXE16000 and GT-AX11000_PRO to the
3006 firmware series.
- NEW: Added RT-BE92U support, based on GPL 102_37526.
- NEW: Added Control-D servers to DNS-over-TLS
presets (dave14305)
- UPDATED: Merged GPL 3006.102_36521 for Wifi 6 models (Wifi 7
devices other than the RT-BE92U are still on
102_37346).
- UPDATED: OpenVPN to 2.6.14.
- UPDATED: miniupnpd to 2.3.8.
- UPDATED: amtm to 5.2 (decoderman)
- UPDATED: dnsmasq to 2.91.
- UPDATED: dropbear to 2025.87.
- CHANGED: Setting DNS Director to "Router" will now always
redirect to the router's own IP. Previously it
would redirect to the first DNS server configured
on the DHCP page (which defaults to the router
itself).
If you need DNS Director to redirect to an IP
configured in your DHCP settings, use a Custom DNS
entry in DNS Director. This makes it more consistant
with what the name implies, and was also necessary
for improved Guest Network support.
- CHANGED: Tools category renamed System Info.
- CHANGED: Tools -> Other Settings were moved to new tabs
(Administration -> Tweaks, and
Traffic Analyzer -> Settings).
- CHANGED: Moved "Redirect to asusrouter.com " to the new
Tweaks tab, and moved "Enable JFFS Custom Scripts"
to the Basic Config section on the System page.
- FIXED: Missing hostname on Wireless Log for MLO-capable Wifi 7
clients.
- FIXED: CVE-2024-9143 in OpenSSL (Debian backport by RSDNTWK)
- FIXED: CVE-2024-13176 in OpenSSL (Ubuntu backport by RSDNTWK)
- FIXED: Guest Networks on an isolated VLAN with DNS Director set
to "Router" would fail to do any name resolution (both
for whole network and for specific clients).
- FIXED: Wrong tab selected when clicking on "Profile" on the
VLAN page (dave14305)
- FIXED: Missing button to remove entries in the Offline Client
List (dave14305)
- FIXED: CVE-2025-2492 in AiCloud (backport from upstream)
- FIXED: DoT access wasn't properly blocked when appropriate
for Guest Networks.
- FIXED: DNS-over-TLS presets overwritten by Asus' own (dave14305)
- FIXED: Networkmap system status frame failing to load when
accessing the router with some particular hostnames.
- FIXED: Missing option to disable logging of DHCP/RA queries.