CVE-2026-32326: Sharp Corporation 5g Mobile Router Sh-u01

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.

Affected products

• Sharp Corporation 5g Mobile Router Sh-u01: up to and including S4.48.00
• Sharp Corporation Home 5g HR01: up to and including 38JP_0_490
• Sharp Corporation Home 5g HR02: up to and including S5.A1.00
• Sharp Corporation Pocket Wifi 5g a503sh: up to and including S7.41.00
• Sharp Corporation Speed Wi-Fi 5g x01: up to and including 3RJP_2_03I
• Sharp Corporation Wi-Fi Station Sh-52a: up to and including 38JP_2_03J
• Sharp Corporation Wi-Fi Station Sh-52b
• Sharp Corporation Wi-Fi Station Sh-54c: up to and including S6.64.00

Published 2026-03-25. Last modified 2026-06-17.