SHARP Network Scanner Tool Arbitrary File Write Vulnerability (CVE-2026-02448)

Vulnerability Overview A security vulnerability exists in the application software of SHARP Digital Multifunctional Systems. This vulnerability allows unauthenticated remote attackers to send arbitrary files to the PC running the application, potentially resulting in unauthorized access to the PC or the execution of malicious files. Affected Products Affected Products and Firmware Versions: - Network Scanner Tool Lite V2.0.13.3 and earlier versions - Network Scanner Tool (bundled software for Sharpdesk) V6.1.1.8 and earlier versions Remediation 1. Update Application: - For Network Scanner Tool Lite, download the updated application and apply the update. - Download the security-patched application (Link). - After updating, open "System Options" to confirm that the "Latest Version" is installed. Additionally, verify that the username and password are correctly configured in "Secure Account Settings." 2. Discontinued Products: - Network Scanner Tool Lite V2.0.11.14 and earlier versions - Network Scanner Tool V6.1.1.8 and earlier versions 3. Mitigation Measures: - If updating is not possible, open "System Options" in the product and perform the following actions: - Check "Allow Anonymous FTP Login" - Configure the username and password in "Custom FTP Log" - Ensure the protection of the PC and device by performing the following actions: - Do not connect the device directly to the internet; connect via a firewall or similar network device. - Implementing the above measures can reduce the risk of information leakage caused by malicious third parties. References SHARP Support Page JPCERT/CC Security Advisory Sharp Network Scanner Tool Insecure Initial Configuration (Link) Acknowledgments This vulnerability was discovered through a report by Deniz Güney Yıldırım. SHARP sincerely thanks them for their responsible disclosure. Revision History July 31, 2026: Initial release of this vulnerability information. Affected Models and Status Notes Check the product's software version by following these steps: - In the PC taskbar, right-click the product icon and then click "Version Information..."

Goal Reached Thanks to every supporter — we hit 100%!

SHARP Network Scanner Tool Arbitrary File Write Vulnerability (CVE-2026-02448)

More from this source