A vulnerability classified as critical was found in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow.

This vulnerability is cataloged as CVE-2026-2202. The attack may be launched remotely. Furthermore, there is an exploit available.