CVE-2026-63563
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Sharp and Toshiba Tec MFPs for a specific market are shipped with user authentication disabled in the initial configuration. This allows editing the address book and document filing features without authentication.
Risk Assessment
An unauthorized user can modify the address book and manage documents, compromising data confidentiality and integrity.
Recommendation
Enable user authentication in the device configuration before putting it into use.
Other vulnerabilities in Sharp/Toshiba Tec MFP
See allOriginal NVD description (English source)
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication. Products intended for the Japanese market are not affected.