Which versions of Home 5G Hr01 are affected by CVE-2026-32326?

CVE-2026-32326 presents notable security risk, a missing authentication vulnerability rated CVSS 6.9. This could allow unauthorized access to protected resources.

How to fix or mitigate CVE-2026-32326?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Audit authentication configurations.

Home 5G Hr01 CVE-2026-32326

Q: What is the CVSS score of CVE-2026-32326?

CVE-2026-32326 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-15194 MEDIUM

Missing Authentication for Critical Function (CWE-306)

2026-03-25 jpcert

GHSA-wg6h-5fm8-5gmj

Authentication Bypass Home 5G Hr01 Home 5G Hr02 Wi Fi Station Sh 52A Wi Fi Station Sh 52B Wi Fi Station Sh 54C 5G Mobile Router Sh U01 Pocket Wifi 5G A503Sh Speed Wi Fi 5G X01

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 25, 2026 - 08:00 euvd

EUVD-2026-15194

Analysis Generated

Mar 25, 2026 - 08:00 vuln.today

CVE Published

Mar 25, 2026 - 07:38 nvd

MEDIUM 6.9

DescriptionCVE.org

SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.