A vulnerability classified as critical was found in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow.

This vulnerability is tracked as CVE-2026-0640. The attack can be launched remotely. Moreover, an exploit is present.