CVE-2026-60011

EUVD-2026-52249
Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.
Forced Browsing
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Common Weakness Enumeration
References
https://corporate.jp.sharp/info/product-security/advisory-list/2026-004/
https://global.sharp/corporate/info/product-security/advisory-list/2026-004/
https://jvn.jp/en/vu/JVNVU98759887/
https://www.toshibatec.co.jp/news/info/20260731-01.html
https://www.toshibatec.com/information/20260731_01.html