Missing Authentication for Critical Function in Sharp Corporation products - CVE-2026-32326

Vulnerability identifier: #VU124650

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-32326

CWE-ID: CWE-306

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to missing authentication for critical function. A remote user on the local network can gain access to sensitive information on the target system.

5G Mobile Router SH-U01
Pocket WiFi 5G A503SH
Speed Wi-Fi 5G X01
home 5G HR01
home 5G HR02
Wi-Fi STATION SH-52A
Wi-Fi STATION SH-52B
Wi-Fi STATION SH-54C

Install updates from vendor's website.

Pocket WiFi 5G A503SH - update to S7.44.00
home 5G HR01 - update to 38JP_0_500
home 5G HR02 - update to S5.A2.00
Wi-Fi STATION SH-52B - update to S3.87.17
Wi-Fi STATION SH-54C - update to S6.65.00

• https://jvn.jp/en/jp/JVN49524110/index.html
• https://global.sharp/corporate/info/product-security/advisory-list/2026-002/

• Information disclosure in SHARP routers