A vulnerability categorized as critical has been discovered in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Executing a manipulation of the argument ssid can lead to stack-based buffer overflow.

This vulnerability is registered as CVE-2026-2874. It is possible to launch the attack remotely. Furthermore, an exploit is available.