CVE-2026-2202CWE-119CWE-120

Tenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow

High · published February 9, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow is lurking in your Tenda AC8 router! Remote attackers can exploit this through a simple manipulation of the argument shareSpeed — no magic wand required! 🔥 Think of your router as a busy restaurant kitchen. If a chef accidentally overfills a pot (buffer overflow), it can spill over and disrupt all the orders, making a complete mess of the kitchen! This vulnerability could allow attackers to remotely crash your router or, even worse, potentially gain unauthorized access to your network. Imagine a hacker sneaking into the kitchen and tampering with your orders — that’s how serious this could get!

Put simply

Think of your router as a busy restaurant kitchen. If a chef accidentally overfills a pot (buffer overflow), it can spill over and disrupt all the orders, making a complete mess of the kitchen! In the Tenda AC8 router's HTTP daemon, the function fromSetWifiGusetBasic doesn't handle input properly, leading to a buffer overflow when the shareSpeed argument is manipulated. This can be exploited remotely, putting your router at risk.

What to do

This vulnerability could allow attackers to remotely crash your router or, even worse, potentially gain unauthorized access to your network. Imagine a hacker sneaking into the kitchen and tampering with your orders — that’s how serious this could get! Patch your Tenda AC8 immediately to version 16.03.33.06 to fix this vulnerability. Additionally, consider reviewing your network settings and keeping an eye on any unusual activity. Don’t leave your kitchen door wide open! This is fixable! Stay proactive and you'll have your network fortified in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00826 · 57.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-09T01:32Z
EPSS history
Timeline
  • 09 FEB 01:32Z
    Tenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow
    cvelistv5