#VU124650 Missing Authentication for Critical Function in Sharp Corporation products - CVE-2026-32326

Vulnerability identifier: #VU124650

Vulnerability risk: Medium

CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2026-32326

CWE-ID: CWE-306

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerable software:
5G Mobile Router SH-U01
Pocket WiFi 5G A503SH
Speed Wi-Fi 5G X01
home 5G HR01
home 5G HR02
Wi-Fi STATION SH-52A
Wi-Fi STATION SH-52B
Wi-Fi STATION SH-54C

Software vendor:
Sharp Corporation

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to missing authentication for critical function. A remote user on the local network can gain access to sensitive information on the target system.

Install updates from vendor's website.

• https://jvn.jp/en/jp/JVN49524110/index.html
• https://global.sharp/corporate/info/product-security/advisory-list/2026-002/