CVE-2026-63563 Sharp CVE debrief

Who should care

Organizations using Sharp and Toshiba Tec MFPs, particularly those outside the Japanese market, should be aware of this vulnerability. They should verify their MFP configurations to ensure user authentication is enabled and review access to address book editing and Document Filing features. Security teams and vulnerability management teams should prioritize this vulnerability and plan for remediation.

Technical summary

The CVE record indicates that certain Sharp and Toshiba Tec MFPs were shipped with user authentication disabled, allowing unauthorized access to address book editing and Document Filing features. This vulnerability affects organizations using these MFPs, particularly those outside the Japanese market. To mitigate this vulnerability, organizations should verify their MFP configurations to ensure user authentication is enabled and review access to address book editing and Document Filing features. The CVE record was published on 2026-08-03T09:17:06.310Z and has not been modified since then. The information provided is based on the CVE record and NVD detail.

Defensive priority

Organizations using Sharp and Toshiba Tec MFPs should verify their configurations and ensure user authentication is enabled.

Recommended defensive actions

• Verify MFP configurations to ensure user authentication is enabled
• Restrict access to address book editing and Document Filing features
• Monitor for updates from Sharp and Toshiba Tec regarding this vulnerability
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record indicates that certain Sharp and Toshiba Tec MFPs were shipped with user authentication disabled. Products for the Japanese market are not affected. Organizations should verify their MFP configurations to ensure user authentication is enabled and review access to address book editing and Document Filing features. The CVE record was published on 2026-08-03T09:17:06.310Z and has not been modified since then. The information provided is based on the CVE record and NVD detail. Further verification is recommended.

Official resources