Authentication Vulnerability in Sharp and Toshiba Tec Multifunction Printers
CVE-2026-63563
Key Information:
- Vendor
Sharp Corporation
- Vendor
- CVE Published:
- 3 August 2026
Badges
What is CVE-2026-63563?
Certain Sharp and Toshiba Tec multifunction printers have been found to have user authentication disabled in their default configuration. This lack of necessary authentication allows unauthorized users to edit the address book and access sensitive Document Filing features without any verification. The flaw does not affect products designed for the Japanese market, making it critical for users in other regions to take immediate steps to secure their devices.
Affected Version(s)
Sharp MFPs see the information provided by Sharp Corporation
Toshiba Tec MFPs see the information provided by Toshiba Tec
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.