{"schemaVersion":3,"id":"CVE-2026-32326","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.","dates":{"published":"2026-03-25T07:38:20.672Z","modified":"2026-03-25T13:26:49.064Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.9,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":5.7,"severity":"medium","vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.7,"severity":"medium","vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00298,"percentile":0.21182,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.02000000000000001,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00278},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00298,"percentile":0.21182}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00278,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00298,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00298,"percentile":0.21182}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-306","name":"Missing Authentication for Critical Function","description":"The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/306.html"}],"affected":[{"vendor":"sharp corporation","product":"5g mobile router sh-u01","name":"5G Mobile Router SH-U01","label":"5g mobile router sh-u01","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"S4.48.00 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"S4.48.00 and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/5g_mobile_router_sh-u01"},{"vendor":"sharp corporation","product":"home 5g hr01","name":"home 5G HR01","label":"home 5g hr01","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"38JP_0_490 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"38JP_0_490 and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/home_5g_hr01"},{"vendor":"sharp corporation","product":"home 5g hr02","name":"home 5G HR02","label":"home 5g hr02","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"S5.A1.00 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"S5.A1.00 and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/home_5g_hr02"},{"vendor":"sharp corporation","product":"pocket wifi 5g a503sh","name":"Pocket WiFi 5G A503SH","label":"pocket wifi 5g a503sh","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"S7.41.00 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"S7.41.00 and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/pocket_wifi_5g_a503sh"},{"vendor":"sharp corporation","product":"speed wi-fi 5g x01","name":"Speed Wi-Fi 5G X01","label":"speed wi-fi 5g x01","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3RJP_2_03I and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"3RJP_2_03I and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/speed_wi-fi_5g_x01"},{"vendor":"sharp corporation","product":"wi-fi station sh-52a","name":"Wi-Fi STATION SH-52A","label":"wi-fi station sh-52a","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"38JP_2_03J and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"38JP_2_03J and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/wi-fi_station_sh-52a"},{"vendor":"sharp corporation","product":"wi-fi station sh-52b","name":"Wi-Fi STATION SH-52B","label":"wi-fi station sh-52b","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"S3.87.15 and earlierr","noFixRecorded":false,"fixedIn":null}],"versionsText":"S3.87.15 and earlierr","eol":null,"hubHref":"/vendor/sharp_corporation/wi-fi_station_sh-52b"},{"vendor":"sharp corporation","product":"wi-fi station sh-54c","name":"Wi-Fi STATION SH-54C","label":"wi-fi station sh-54c","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"S6.64.00 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"S6.64.00 and earlier","eol":null,"hubHref":"/vendor/sharp_corporation/wi-fi_station_sh-54c"}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://global.sharp/corporate/info/product-security/advisory-list/2026-002/","label":"global.sharp/corporate/info/product-security/advisory-list/2026-002/","hostname":"global.sharp","tags":[]},{"url":"https://jvn.jp/en/jp/JVN49524110/","label":"jvn.jp/en/jp/JVN49524110/","hostname":"jvn.jp","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-03-25T07:38:20.672Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-25T13:26:49.064Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T04:29:59.913Z","stale":false,"partial":false}}