CVE-2026-32326
Medium
Description
SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.
SeverityMedium
CVSS6.9
Exploit probability—
Producthome 5G HR01
PublishedMar 25, 2026
First seenMar 25, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Sharp Corporation home 5G HR01 | 38JP_0_490 and earlier | — |
| Sharp Corporation home 5G HR02 | S5.A1.00 and earlier | — |
| Sharp Corporation Wi-Fi STATION SH-52A | 38JP_2_03J and earlier | — |
| Sharp Corporation Wi-Fi STATION SH-52B | S3.87.15 and earlierr | — |
| Sharp Corporation Wi-Fi STATION SH-54C | S6.64.00 and earlier | — |
| Sharp Corporation 5G Mobile Router SH-U01 | S4.48.00 and earlier | — |
| Sharp Corporation Pocket WiFi 5G A503SH | S7.41.00 and earlier | — |
| Sharp Corporation Speed Wi-Fi 5G X01 | 3RJP_2_03I and earlier | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.