CVE-2026-63563

State: Published
Severity: 6.9 Medium
Published: Aug 3, 2026
Updated: Aug 3, 2026
Reserved: Jul 21, 2026

Description

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication. Products intended for the Japanese market are not affected.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N	jpcert
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	jpcert

Weaknesses

CWE-1188 Initialization of a resource with an insecure default

Affected Products

Product	Versions
Sharp MFPsSharp Corporation	see the information provided by Sharp CorporationAffected
Toshiba Tec MFPsToshiba Tec Corporation	see the information provided by Toshiba TecAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.