Asus ASUS RT-AX86U
- The ASUS RT-AX86U is a high-performance Wi-Fi router that supports the latest Wi-Fi 6 standard, providing fast and reliable connectivity for your devices.
Specifications
- AI
- AiMesh, AiProtection Pro
- OS
- Asuswrt
- CPU
- 1.8 GHz quad-core
- LAN
- Gigabit Ethernet
- QoS
- Adaptive QoS
- RAM
- 1 GB
- USB
- 1x USB 3.2 Gen 1, 1x USB 2.0
- WAN
- Ethernet
- Wi-Fi
- Wi‑Fi 6 (802.11ax)
- Bands
- Dual-band
- Flash
- 256 MB
- Ports
- 1x 2.5GbE WAN/LAN, 1x GE WAN, 4x GE LAN, 2x USB
- Antenna
- External
- MU-MIMO
- Yes
- Antennas
- 3x external, 1x internal
- Firewall
- Yes
- LAN Ports
- 4x GE
- WAN Ports
- 1x 2.5GbE, 1x GE
- Management
- Web, ASUS Router app
Potential Threats
23 Known CVEs
Default IP
192.168.50.1
Default admin panel address for Asus ASUS RT-AX86U
Default Credentials — Asus ASUS RT-AX86U
Known CVE Vulnerabilities (23)
The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for us...
The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with...
The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and...
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the Gallery title fie...
Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "0...
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an Image Title in all ver...
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to e...
The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button shortcode in all versions up to, and inc...
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions...
A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability coul...
Showing 10 of 23
FAQ
The most common default credentials for Asus ASUS RT-AX86U are listed in the table above. Always change these immediately after setup.
The default username for Asus ASUS RT-AX86U is typically "admin". The full list of default credentials including username, password, access type and port is shown in the table on this page.
Log in to the admin panel using the default credentials listed above. Navigate to Administration → Password or System → Account settings. Enter the current password and set a new strong password. Save the changes.
Locate the Reset button (usually a small pinhole on the back/bottom of the device). Hold it for 10-30 seconds while powered on until the LEDs flash. The device will reboot with default settings.
No. Default credentials are publicly known and frequently exploited by automated scanners. Change the admin password immediately after first login.
The default admin login address for Asus ASUS RT-AX86U is shown in the "Default IP" field above. Most routers use 192.168.1.1 or 192.168.0.1. Open a browser on a device connected to the router and navigate to that IP.
Log in to the router admin panel at the default IP address. Go to Wireless or Wi-Fi settings. Find the WPA2/WPA3 passphrase field and update it. Save and reconnect your devices.
Change the default admin password and Wi-Fi password immediately. Disable WPS (Wi-Fi Protected Setup) — it is vulnerable to brute-force attacks. Enable WPA3 encryption if supported. Turn off remote management unless needed. Keep firmware updated.
Asus ASUS RT-AX86U has 23 known CVE vulnerabilities documented in our database. The full list with severity ratings is shown on this page. Apply the latest firmware update from the manufacturer to address known issues.