PT-2026-27642 · Sharp · 5G Mobile Router Sh-U01+6

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-32326

NVD

CVSS v3.1

5.7

Medium

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-32326

Affected Products

5G Mobile Router Sh-U01

Pocket Wifi 5G A503Sh

Speed Wi-Fi 5G X01

Wi-Fi Station Sh-52B

Wi-Fi Station Sh-54C

Home 5G Hr01

Home 5G Hr02

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32326 · Security Note
• https://jvn.jp/en/jp/JVN49524110 · Note
• https://global.sharp/corporate/info/product-security/advisory-list/2026-002 · Note