Most recent entries from all

EUVD-2026-343623

fkie_cve-2026-63563

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication. Products intended for the Japanese market are not affected.

GHSA-hj84-h226-g524

jvndb-2026-026398

Sharp and Toshiba Tec MFPs (multifunction printers) contain multiple vulnerabilities listed below.<ul><li>User authentication can be bypassed with crafted URLs (CWE-425) - CVE-2026-60011</li><li>Incomplete cleanup of cached files (CWE-459) - CVE-2026-63545</li><li>Insecure initial configuration (CWE-1188) - CVE-2026-63563</li><ul><li>The products for a certain market have been shipped with the user authentication feature disabled in the initial configuration, which means that the address book editing and a range of features related to Document Filing can be accessed without user authentication.</li><li>Products intended for the Japanese market are not affected by this vulnerability.</li></ul></ul>CVE-2026-60011 and CVE-2026-63563 were reported directly to Sharp Corporation by the following reporters. - CVE-2026-60011: Mohamed Abdelhady of Cyber 50 Defense - CVE-2026-63563: John Jackson Sharp Corporation reported CVE-2026-63545 to JPCERT/CC.