Strix
26.1K

CVE-2026-32326

MEDIUMCVSS 6.9/10EPSS 0.28%

Last modified

CVE-2026-32326 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. EPSS estimates a 0.28% chance of exploitation in the next 30 days.

Description

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.

Metrics

CVSS 4.0
6.9/10

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS 3.0
5.7/10

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.28%

19.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
Sharp Corporationhome 5G HR0138JP_0_490 and earlier
Sharp Corporationhome 5G HR02S5.A1.00 and earlier
Sharp CorporationWi-Fi STATION SH-52A38JP_2_03J and earlier
Sharp CorporationWi-Fi STATION SH-52BS3.87.15 and earlierr
Sharp CorporationWi-Fi STATION SH-54CS6.64.00 and earlier
Sharp Corporation5G Mobile Router SH-U01S4.48.00 and earlier
Sharp CorporationPocket WiFi 5G A503SHS7.41.00 and earlier
Sharp CorporationSpeed Wi-Fi 5G X013RJP_2_03I and earlier

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-32326?
SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.
How severe is CVE-2026-32326?
CVE-2026-32326 has a CVSS score of 6.9/10 (MEDIUM severity). The EPSS model estimates a 0.28% probability of exploitation in the next 30 days.
How do I fix CVE-2026-32326?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-32326?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST