Sharp/Toshiba Tec MFP Vulnerability Advisory: Auth Bypass, Insecure Config

Vulnerability Overview Vulnerability ID: JVND-2026-026398 Description: Multiple vulnerabilities exist in Sharp and Toshiba Tec multifunction printers (MFPs), including: - User authentication can be bypassed via crafted URLs (CVE-425) - Incomplete cleanup of cache files (CVE-459) - Insecure initial configuration (CVE-1188) - Products in certain markets have user authentication disabled by default during initial configuration, allowing access to features such as address book editing and document management without user authentication Affected Products Affected Products: Sharp and Toshiba Tec multifunction printers Specific Vulnerabilities: - CVE-2026-60011: Reported by Mohamed Abdelady of Cyber 50 Defense - CVE-2026-63545: Reported by John Jackson - CVE-2026-63563: Reported by Sharp Corporation Remediation CVE-2026-60011, CVE-2026-63545: - Update firmware: Apply the appropriate firmware updates as provided by the vendor CVE-2026-63563: - Apply workarounds: Implement the corresponding workarounds as provided by the vendor Additional Information CVSS Scores: - CVE-2026-60011: CVSS v3.3 (Medium) - CVE-2026-63545: CVSS v3.3 (Low) - CVE-2026-63563: CVSS v3.3 (Medium) References: - JVN: JVN#i8759887 Publication Date: 2026/07/31 Last Updated: 2026/08/04 Summary This vulnerability affects Sharp and Toshiba Tec multifunction printers, involving multiple security issues such as authentication bypass, cache file cleanup problems, and insecure initial configurations. Users are advised to update their firmware or apply workarounds as provided by the vendor to remediate these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Sharp/Toshiba Tec MFP Vulnerability Advisory: Auth Bypass, Insecure Config