CVE-2026-2203 | Tenda AC8 16.03.33.05 Embedded Httpd Service fast_setting_wifi_set timeZone buffer overflow

18:54 - 07 Feb 2026
A vulnerability, which was classified as critical, has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer overflow. This vulnerability is registered as CVE-2026-2203. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Article info: