Medium 6.9Published Mar 25, 2026

CVE-2026-32326SHARP routers do not perform authentication for some web APIs.

Updated under an hour ago (Oct 28, 2026, 1:40 PM ET)

Does this affect you?

It affects Sharp Corporation home 5G HR01 and 7 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Sharp Corporation home 5G HR01

Exploited in the last 30 days

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.

CVSS: 6.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Weakness (CWE): CWE-306
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: jpcert
NVD analysis: Awaiting Analysis
Record last updated: Mar 25, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Sharp Corporation home 5G HR01 sharp:home_5g_hr01 (from the name)	38JP_0_490 and earlier	CNA record
Sharp Corporation home 5G HR02 sharp:home_5g_hr02 (from the name)	S5.A1.00 and earlier	CNA record
Sharp Corporation Wi-Fi STATION SH-52A sharp:wi_fi_station_sh_52a (from the name)	38JP_2_03J and earlier	CNA record
Sharp Corporation Wi-Fi STATION SH-52B sharp:wi_fi_station_sh_52b (from the name)	S3.87.15 and earlierr	CNA record
Sharp Corporation Wi-Fi STATION SH-54C sharp:wi_fi_station_sh_54c (from the name)	S6.64.00 and earlier	CNA record
Sharp Corporation 5G Mobile Router SH-U01 sharp:5g_mobile_router_sh_u01 (from the name)	S4.48.00 and earlier	CNA record
Sharp Corporation Pocket WiFi 5G A503SH sharp:pocket_wifi_5g_a503sh (from the name)	S7.41.00 and earlier	CNA record
Sharp Corporation Speed Wi-Fi 5G X01 sharp:speed_wi_fi_5g_x01 (from the name)	3RJP_2_03I and earlier	CNA record

References

References

https://global.sharp/corporate/info/product-security/advisory-list/2026-002/
https://jvn.jp/en/jp/JVN49524110/

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.