CVE-2026-63545

Internal Cache Data Leakage in Sharp and Toshiba Tec Multifunction Printers

Published Aug 3, 2026 CVSS 4.0 · 2.4 Low EPSS < 1% KEV · Not listed
Description
Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.

Analysis

AI-generated

Technical impact

The vulnerability causes Sharp and Toshiba Tec multifunction printers to retain cached data after printing sessions. Because the caches are not cleared, subsequent users on the same device can read these files, potentially exposing confidential documents. This behavior aligns with CWE-459, indicating insecure removal of data from internal storage.

Affected Systems

Sharp Corporation Sharp MFPs and Toshiba Tec Corporation Toshiba Tec MFPs are affected. No specific model or firmware version details are provided in the advisory, so the issue may apply broadly across current device lines.

Risk and Exploitability

The CVSS score of 2.4 indicates a low severity risk and the EPSS score is unavailable, suggesting limited exploitation likelihood. As the flaw requires physical or local network access to the device, only users with direct access can exploit it. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Contact Sharp Corporation and Toshiba Tec to obtain a firmware update that clears internal caches after printing.
  • If an update is not available, reconfigure the MFP to automatically delete all cached print data upon job completion.
  • Restrict access to the device by ensuring only authorized users can print or retrieve documents, and disable user log‑in features if not required.

Generated by OpenCVE AI on August 4, 2026 at 10:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Sharp Corporation
Sharp Corporation sharp Mfps
Toshiba Tec Corporation
Toshiba Tec Corporation toshiba Tec Mfps
Vendors & Products Sharp Corporation
Sharp Corporation sharp Mfps
Toshiba Tec Corporation
Toshiba Tec Corporation toshiba Tec Mfps
Type Values Removed Values Added
Title Internal Cache Data Leakage in Sharp and Toshiba Tec Multifunction Printers
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.
Weaknesses CWE-459
References
Metrics cvssV3_1

{'score': 2.4, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 2.4, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Aug 3, 2026, 11:12 AM
Reserved
Jul 21, 2026, 8:39 AM
Status
Awaiting Analysis
Published
Aug 3, 2026, 9:17 AM
Modified
Aug 3, 2026, 5:40 PM