{"id":"CVE-2026-63563","aliases":["EUVD-2026-52251","GHSA-hj84-h226-g524"],"status":"published","title":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with...","description":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.\r\nProducts intended for the Japanese market are not affected.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0043,"percentile":0.37518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-1188"],"published":"2026-08-03T07:57:50Z","modified":"2026-08-03T17:40:27Z","exploits":[{"source":"pocgithub","id":"redr0nin/CVE-2026-63563","title":"redr0nin/CVE-2026-63563","date":"2026-07-31","url":"https://github.com/redr0nin/CVE-2026-63563"}],"products":[{"vendor":"sharp corporation","product":"sharp mfps"},{"vendor":"toshiba tec corporation","product":"toshiba tec mfps"}],"references":[{"url":"https://global.sharp/corporate/info/product-security/advisory-list/2026-004/"},{"url":"https://corporate.jp.sharp/info/product-security/advisory-list/2026-004/"},{"url":"https://www.toshibatec.com/information/20260731_01.html"},{"url":"https://www.toshibatec.co.jp/news/info/20260731-01.html"},{"url":"https://jvn.jp/en/vu/JVNVU98759887/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63563"},{"url":"https://corporate.jp.sharp/info/product-security/advisory-list/2026-004"},{"url":"https://global.sharp/corporate/info/product-security/advisory-list/2026-004"},{"url":"https://jvn.jp/en/vu/JVNVU98759887"},{"url":"https://github.com/advisories/GHSA-hj84-h226-g524"}],"sources":{"cve":[{"id":"CVE-2026-63563","description":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.\r\nProducts intended for the Japanese market are not affected.","status":"published","published":"2026-08-03T07:57:50.953Z","modified":"2026-08-03T11:11:35.7Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:19:56.284359Z"}],"euvd":[{"id":"EUVD-2026-52251","description":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.\r\nProducts intended for the Japanese market are not affected.","status":"published","published":"2026-08-03T07:57:50Z","modified":"2026-08-03T11:11:35Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:02:24.819631Z"}],"ghsa":[{"id":"GHSA-hj84-h226-g524","title":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with...","description":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.\nProducts intended for the Japanese market are not affected.","status":"published","published":"2026-08-03T09:32:38Z","modified":"2026-08-03T09:32:46Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T15:10:02.233759Z"}],"nvd":[{"id":"CVE-2026-63563","description":"Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.\r\nProducts intended for the Japanese market are not affected.","status":"published","published":"2026-08-03T09:17:06.31Z","modified":"2026-08-03T17:40:27.3Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:12:34.643497Z"}]}}