https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:33:07 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-60011 <p>Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.</p> <p>Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-60011 https://vulnerability.circl.lu/vuln/ghsa-wrg8-43fx-27hh <p>Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.</p> <p>Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.</p> https://vulnerability.circl.lu/vuln/ghsa-wrg8-43fx-27hh https://vulnerability.circl.lu/vuln/jvndb-2026-026398 <p>Sharp and Toshiba Tec MFPs (multifunction printers) contain multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;User authentication can be bypassed with crafted URLs (CWE-425) - CVE-2026-60011&lt;/li&gt;&lt;li&gt;Incomplete cleanup of cached files (CWE-459) - CVE-2026-63545&lt;/li&gt;&lt;li&gt;Insecure initial configuration (CWE-1188) - CVE-2026-63563&lt;/li&gt;&lt;ul&gt;&lt;li&gt;The products for a certain market have been shipped with the user authentication feature disabled in the initial configuration, which means that the address book editing and a range of features related to Document Filing can be accessed without user authentication.&lt;/li&gt;&lt;li&gt;Products intended for the Japanese market are not affected by this vulnerability.&lt;/li&gt;&lt;/ul&gt;&lt;/ul&gt;CVE-2026-60011 and CVE-2026-63563 were reported directly to Sharp Corporation by the following reporters. - CVE-2026-60011: Mohamed Abdelhady of Cyber 50 Defense - CVE-2026-63563: John Jackson Sharp Corporation reported CVE-2026-63545 to JPCERT/CC.</p> <p>Sharp and Toshiba Tec MFPs (multifunction printers) contain multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;User authentication can be bypassed with crafted URLs (CWE-425) - CVE-2026-60011&lt;/li&gt;&lt;li&gt;Incomplete cleanup of cached files (CWE-459) - CVE-2026-63545&lt;/li&gt;&lt;li&gt;Insecure initial configuration (CWE-1188) - CVE-2026-63563&lt;/li&gt;&lt;ul&gt;&lt;li&gt;The products for a certain market have been shipped with the user authentication feature disabled in the initial configuration, which means that the address book editing and a range of features related to Document Filing can be accessed without user authentication.&lt;/li&gt;&lt;li&gt;Products intended for the Japanese market are not affected by this vulnerability.&lt;/li&gt;&lt;/ul&gt;&lt;/ul&gt;CVE-2026-60011 and CVE-2026-63563 were reported directly to Sharp Corporation by the following reporters. - CVE-2026-60011: Mohamed Abdelhady of Cyber 50 Defense - CVE-2026-63563: John Jackson Sharp Corporation reported CVE-2026-63545 to JPCERT/CC.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-026398