CVE-2026-60011
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Sharp and Toshiba Tec MFPs fail to properly authorize requests to directly access certain stored image data.
Risk Assessment
An unauthorized user can access sensitive image data stored on the device.
Recommendation
Apply the vendor patch or configure proper authorization mechanisms for data access.
Other vulnerabilities in Sharp/Toshiba Tec MFP
See all- CVE-2026-63563Medium
Sharp and Toshiba Tec MFPs for a specific market are shipped with user authentication disabled in the initial configuration. This allows editing the address book and document filing features without authentication.
- CVE-2026-63545Low
Sharp and Toshiba Tec MFPs cache print data internally and leave it uncleared. It may be accessed later by other users.
Original NVD description (English source)
Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.