EUVD-2026-52250
GHSA-8p37-6xc9-pcg2
Severity by source
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Physical presence at the device is the sole access requirement; no credentials or user interaction needed; only limited cached data is disclosed with no integrity or availability impact.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
1DescriptionCVE.org
Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.
AnalysisAI
Incomplete cleanup of cached print job data in Sharp and Toshiba Tec multifunction printers exposes previously printed documents to subsequent physical users of the same device. Affecting all versions per CPE data (cpe:2.3:a:sharp_corporation:sharp_mfps and cpe:2.3:a:toshiba_tec_corporation:toshiba_tec_mfps), the flaw (CWE-459) means internal caches are not wiped after a print job completes, allowing the next person who physically accesses the device to potentially retrieve another user's data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Physical access to the MFP device is required - this is the primary and absolute limiting condition enforced by the CVSS AV:P metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall risk is low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An employee completes a print job containing sensitive financial or HR documents and walks away from the shared office printer. A second employee approaches the same device and, through the printer's local panel or by accessing its internal diagnostic or job history interface, retrieves the cached data from the previous job without any credentials. … |
| Remediation | Consult the vendor advisories directly for firmware update availability: Sharp advisory at https://global.sharp/corporate/info/product-security/advisory-list/2026-004/ and Toshiba Tec advisory at https://www.toshibatec.com/information/20260731_01.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Sharp Mfps
View allUnauthenticated network access to address book editing and Document Filing features is possible on Sharp and Toshiba Tec
Unauthenticated network access to stored image data affects Sharp and Toshiba Tec multifunction printers via a forced br
Same weakness CWE-459 – Incomplete Cleanup
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today