VULNERABILITY INTELLIGENCE

CVE-2026-2202

CVSS score8.8 HIGH

EPSS probability0.83%

CISA KEVNot currently listed

Published2026-02-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

Weakness classification

cna@vuldb.com: CWE-119
nvd@nist.gov: CWE-120

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Product