CVE-2026-62416
- State
- Published
- Severity
- 6.9 Medium
- Published
- Aug 3, 2026
- Updated
- Aug 3, 2026
- Reserved
- Jul 14, 2026
Description
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | jpcert |
Weaknesses
- CWE-1188 Initialization of a resource with an insecure default
Affected Products
| Product | Versions |
|---|---|
Network Scanner Tool LiteSharp Corporation |
|
Network Scanner Tool (Bundled software for Sharpdesk)Sharp Corporation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.