Release Asuswrt-Merlin 3006.102.7 is now available

[RMerlin]

Asuswrt-Merlin 3006.102.7 is now available, except for the RT-BE92U. The focus of this release is component updates and bugfixes, with the exception of the GT-BE19000AI which also received a GPL update.

Note that due to remaining stability issues, the RT-BE92U will not get a final 3006.102.7 release. The firmware for that model will instead geta a beta 2 release, and will remain in beta until I can received fixes from Asus, which won't be until after the Chinese New Year holiday.

24-Mar-2026: 3006.102.7_2 is now available. Changes since 3006.102.7:

3006.102.7_2 (24-Mar-2026)
  - NEW: Added Cake support for GT-BE19000AI (implemented the
         missing webui to configure it).
  - UPDATED: Merged GPL 102_39848 (RT-BE92U only).
  - UPDATED: curl to 8.17 (backport from 102_39848).
  - UPDATED: wget to 1.25 (backport from 102_39848).
  - FIXED: Security issue on the Site Survey page
           (reported by Sasha Romijn).
  - FIXED: dnsmasq log noise for IPv6 on Guest Network Pro.
  - FIXED: NTPD settings missing on Wifi 6 models.

Changes in 3006.102.7:

3006.102.7 (22-Feb-2026)
 - NOTE: AiCloud has been removed from Asuswrt-Merlin due
         to its poor security track record.  This also includes
         cloud syncing features such as Asuswebstorage or
         Dropbox syncing with USB folder.  Use a VPN if you
         need secure remote access to your data.

 - UPDATED: Merged GPL 102_40399 (GT-BE19000AI only)
 - UPDATED: OpenVPN to 2.6.19.
 - UPDATED: Dropbear to 2025.89.
 - UPDATED: nettle to 3.10.2.
 - UPDATED: dnsmasq to 2.93-test2 (includes a couple of DNSSEC
            fixes over 2.92)
 - UPDATED: openssl-3.0 to 3.0.19 (GT-BE19000AI only)
 - UPDATED: tor to 0.4.8.22.
 - CHANGED: Added new 2024 DNSSEC trust anchor, which will
            start being used in October 2026.
 - FIXED: IPv6 blocking of DoT servers (dave14305)
 - FIXED: Multiple minor CVE for OpenSSL 1.1: CVE-2025-68160,
          CVE-2025-69418, CVE-2025-69419, CVE-2025-69420,
          CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
          (backports by RSDNTWK)
 - FIXED: Missing UPnP settings on models with multiservice
          WAN support.
 - FIXED: ntpd options missing when operating in WISP mode.
 - FIXED: TrendMicro signatures not updating on RT-BE58_Go.
 - FIXED: Starting a client through VPNDirector would fail to
          update routing rules.
 - REMOVED: AiCloud support, due to security reasons.

Please limit discussions to this particular release (including the RT-BE92U beta). This thread will eventually be locked down once the release feedback as quited down.


Downloads are here.
Changelog is here.

 

[RMerlin]

Notes:

• As mentionned above, the RT-BE92U was released under the beta 2 version since that platform is currently too unstable for a final release. RT-BE92U 3006.102.7_2 is now available.

 

[Seth Harman]

Smooth upgrade, so far so good.

 

[CJ-V300]

I have successfully updated my three routers: an RT-BE88U, an RT-BE92U, and an RT-BE58 Go.

First of all, I completely understand your decision to keep the RT-BE92U on "Beta 2" due to the ongoing Asus GPL bugs. However, I must confess that seeing the "Beta" label on just one of my devices while the rest of the network is on the "Final" release triggers my OCD just a little bit! Honestly, I would have happily taken it as a "Final" release with a disclaimer attached, but I deeply respect your strict quality standards.

I wanted to report that for my specific use case, the RT-BE92U has been absolutely rock-solid. Because I only use its WAN port as an uplink (no LAN ports populated), I have completely bypassed the ethernet crashes or time-sync loss issues. It behaves flawlessly, just as it did when it was my main router.

My topology is actually a bit peculiar, but it's what perfectly fits my needs right now:

• RT-BE88U (Main Router): Hidden inside a network closet with its WiFi disabled, acting essentially as a powerful wired gateway/switch.
• RT-BE92U (Main AP): I use this as my primary Access Point because I really wanted to maintain the 5GHz/6GHz Smart Connect band steering, which the BE88U lacks.
• RT-BE58 Go (AiMesh Node): Hanging directly off the BE92U.
  
  My entire AiMesh backhaul is fully wired via Ethernet.

I know the firmware was just released, so I'll naturally keep an eye on things, but the update process itself went flawlessly. All AiMesh nodes and clients reconnected immediately, and so far, everything looks very promising

 

[RetroPas74]

Just upgraded my AXE-16000 from 3006.102.6 to 3006.102.7 with no issues.
Thanks Merlin!

 

[heysoundude]

It never seems to take the 3 minutes I'm asked to wait...and that's not a complaint!!

UPDATE - it's been 24h now, and all of my wireless clients seem to prefer connecting on the 5GHz band, save for one older laptop (that I should look into upgrading the wireless card in...)

 

[Sundraw]

Thank you Merlin. I hope the European gt-be98 version of Gnuton will be released soon.

 

[MDM]

The usual and already boring - All OK

 

[Blacklistedcard]

Updated my BE98Pro. Looks good.

 

[Interfreak]

Asuswrt-Merlin 3006.102.7 is now available

Thanks @RMerlin

Downloaded and working fine on my RT-AX86U Pro.

 

[CaptainLockness]

Updated my RT-BE96U from beta 1, all good from here!

 

[Makaveli]

Updating now thanks!

 

[casao94]

Updated RT-BE96U from beta1. No issues so far. Thanks!

 

[Texasguy]

Updated to beta 2 rt-be92u no issue so far is there any difference? From Beta 1? or is it just an extension?

 

[RMerlin]

Updated to beta 2 rt-be92u no issue so far is there any difference? From Beta 1? or is it just an extension?

7b6810ec20 Updated documentation
2bc9ee0923 rc: refresh wireguard BLOG bypass when refreshing VPN routing on BCM4916 platform
b4182dd67a webui: update routing rules when toggling a client from the VPNDirector page
4904a33e94 webui: styling fixes to the Firmware Upgrade page for non-AiMesh models.
0099cd1cb9 Bumped revision to beta 2
96e757e5f9 Updated documentation
3f2c98fe2f rom: fix missing signature updater for models with TrendMicro HNS engine

 

[Untried3868]

Router and node updated from Beta 1. So far so good. Thank you @RMerlin !

 

[Howard_inGA]

Smooth upgrade from B2 to the final. Just a few minutes in, but nothing is jumping out as a glitch.
Another beautiful job, Merlin!!

 

[Ravenbak]

Smooth upgrade from B1 to the final , so far so good on my RT-AX86U Pro.

Thanks @RMerlin

 

[PorscheT]

Dirty upgraded BE96U from beta 1 and no issues. Thank you Merlin!

 

[KevinGlynn]

Dirty upgraded BE86U from beta 1... All good so far...