PT-2026-27642 · Sharp · Sharp Routers

Published 2026-03-25 · Updated 2026-04-04 · CVE-2026-32326

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SHARP routers (affected versions not specified)

Description SHARP routers lack authentication for certain web APIs, allowing retrieval of device information without proper authorization. If the administrative password remains at its default setting, unauthorized access and potential device takeover may occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-32326

Affected Products

Sharp Routers

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-32326 · Security Note
• https://twitter.com/CVEarity/status/2040321395792744721 · Twitter Post
• https://global.sharp/corporate/info/product-security/advisory-list/2026-002 · Note
• https://twitter.com/VulmonFeeds/status/2036759345778540559 · Twitter Post
• https://twitter.com/cyberbivash/status/2036730415633875381 · Twitter Post
• https://jvn.jp/en/jp/JVN49524110 · Note