Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-32326

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sharp Corporation home 5G HR01

  • 38JP_0_490 and earlieraffected

Sharp Corporation home 5G HR02

  • S5.A1.00 and earlieraffected

Sharp Corporation Wi-Fi STATION SH-52A

  • 38JP_2_03J and earlieraffected

Sharp Corporation Wi-Fi STATION SH-52B

  • S3.87.15 and earlierraffected

Sharp Corporation Wi-Fi STATION SH-54C

  • S6.64.00 and earlieraffected

Sharp Corporation 5G Mobile Router SH-U01

  • S4.48.00 and earlieraffected

Sharp Corporation Pocket WiFi 5G A503SH

  • S7.41.00 and earlieraffected

Sharp Corporation Speed Wi-Fi 5G X01

  • 3RJP_2_03I and earlieraffected

References