See the separate table below.

Sharp released updated firmware to mitigate 1. and 3. of “Possible impacts” below for the models listed in Table 1. Regarding 2. of “Possible impacts” below, see “Mitigation measures” below to restrict device web page access via password.
Regarding the models listed in Table 2, all firmware versions are affected with 1. and 2. of “Possible impacts”, however, firmware support has ended. Please implement the mitigation measures above or consider discontinuing use of the product or migrating to a successor model.
For details, consult your authorized Sharp service providers.

To mitigate the security risks, ensure to protect your MFPs and apply the following operations:

• ● Change the default Administrator and the default User passwords from factory default and manage them appropriately.
• ● Do not connect MFPs directly to the Internet. Connect them via a firewall or similar network appliance.
• ● Restrict device web page access via password (enable [System Settings]-[Security Settings]-[Password Setting]-[Password Change]-[Restrict Device Web Page Access Via Password]).
• ● Monitor the MFP periodically using the Audit Log functionality to see if suspicious access is observed.

If the above operational mitigations are not practiced, the risks of the vulnerabilities being exploited increases.

• 1. Unauthorized access to certain functions of the MFP may be possible due to unintended permission settings.
• 2. Address book can be edited by anyone if the setting for accessing to device web page requires user authentication is not enabled by default.
• 3. When attempting to print a specially crafted PDF file from a USB storage device, a different file stored within the MFP may be printed unexpectedly.

For further details of the vulnerability, please see the following SHARP Product Security Advisory web site: https://global.sharp/corporate/info/product-security/advisory-list/2026-004/

If the above conditions are fulfilled, attackers may be able to:

• 1. tamper with HTTP requests to the MFP’s web interface, it becomes possible to bypass the authentication mechanism and gain access to image data stored on the device.
• 2. access the address book of the MFP on which the setting is not enabled by default, potentially causing information leakage.
• 3. exploit the multifunction device’s direct printing function, potentially causing information leakage or other security incidents.

To enable attackers to successfully attack the MFP using these vulnerabilities, the following conditions shall be fulfilled:

• ● The attacker is able to access the corporate network to which the MFP is connected
• ● The attacker knows the information that users cannot know through normal operation

JVNVU#98759887:
( https://jvn.jp/en/vu/JVNVU98759887/index.html)

CVE:

https://www.cve.org/CVERecord?id=CVE-2026-60011

https://www.cve.org/CVERecord?id=CVE-2026-63563

https://www.cve.org/CVERecord?id=CVE-2026-63545

July 31, 2026: Initial release of this vulnerability information.

“615” or earlier