https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:53:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277334 EUVD-2026-277334 https://cve.radiocsirt.org/vuln/euvd-2026-277334 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32326 <p>SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.</p> <p>SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32326 https://cve.radiocsirt.org/vuln/ghsa-wg6h-5fm8-5gmj <p>SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.</p> <p>SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.</p> https://cve.radiocsirt.org/vuln/ghsa-wg6h-5fm8-5gmj https://cve.radiocsirt.org/vuln/jvndb-2026-000043 <p>SHARP routers do not perform authentication for some web APIs. Those web APIs provide device information, and the initial administrative password is based on a part of the device information.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-32326&lt;/li&gt;&lt;/ul&gt;Shota Zaizen reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>SHARP routers do not perform authentication for some web APIs. Those web APIs provide device information, and the initial administrative password is based on a part of the device information.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-32326&lt;/li&gt;&lt;/ul&gt;Shota Zaizen reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000043