CVE Intelligence
Analysis AI-assisted

CVE-2026-0640: Tenda AC23 PowerSaveSet sscanf Buffer Overflow

CVE-2026-0640 is a buffer overflow in the PowerSaveSet handler of Tenda AC23 16.03.07.52, triggered by manipulating the Time argument and described as remotely reachable. NVD scores it 9.8 (critical), and the CNA is VulDB. The sources consulted show no confirmed exploitation, although the description states that a public exploit exists.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-0640 describes a classic buffer overflow (CWE-120) in Tenda AC23 version 16.03.07.52. According to the record, the flaw involves the sscanf call in the PowerSaveSet function and is triggered by manipulating the Time argument. The vulnerability was published by VulDB as CNA.

Impact

  • The record states that the attack can be launched remotely and rates the technical impact as total.
  • NVD rates the flaw 9.8 (critical), with high impact on confidentiality, integrity and availability and no privileges or user interaction required.
  • Scores from other providers in the record range from 7.4 to 9.0 and are shown separately.

Affected products and versions

  • Tenda AC23, version 16.03.07.52.
  • Tenda Ac23 Firmware, version 16.03.07.52.
  • No fixed version is listed in the record. This is unknown, not evidence that no fix exists.

Exploitation status

  • The CISA KEV catalog does not list this CVE in the record.
  • The description says a public exploit is available. The record's SSVC data marks exploitation as proof-of-concept and automatable as no.
  • No confirmed active exploitation appears in the sources consulted.

Remediation and mitigation

  • Inventory Tenda AC23 devices and identify any running firmware 16.03.07.52.
  • Check the vendor site and VulDB for a fixed firmware release, since none is listed in the record.
  • Do not expose the device management interface to the internet, restrict administrative access to trusted networks, and segment router and IoT devices.
  • If no fix is available, plan replacement or decommissioning of the affected device.

Detection guidance

  • Review web management access logs for unexpected requests to device configuration handlers.
  • Watch for unexplained device reboots, crashes or service loss, which may indicate abuse of the memory flaw.
  • Monitor for unusual outbound connections from network devices.

Limitations of the available information

  • The record contains no vendor advisory and no fixed version.
  • Some GitHub references in the record are tagged as broken links, so their content could not be verified here.
  • Scores differ between NVD, VulDB and other providers.
  • The exact conditions required for exploitation and the device's support status are not stated.
  • The EPSS probability is 0.03476 with percentile 0.89043, as recorded.

Frequently asked questions

Is CVE-2026-0640 being actively exploited?

The CISA KEV catalog does not list it in this record, and no confirmed active exploitation appears in the sources consulted. The description does state that a public exploit is available.

Which versions are affected?

The record lists Tenda AC23 and Tenda Ac23 Firmware, both at version 16.03.07.52. No other versions are listed.

Is there a fix?

The record lists no fixed version. This is unknown, so check the vendor and VulDB for updates and consider restricting or replacing the device if no fix is released.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.