A vulnerability, which was classified as critical, has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer overflow.

This vulnerability is registered as CVE-2026-2203. Remote exploitation of the attack is possible. Furthermore, an exploit is available.