Medium severity · published Aug 3, 2026
CVE-2026-62416
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Network Scanner Tool (Bundled software for Sharpdesk) · Sharp Corporation
through V6.1.1.8 · source: vendor
NS
Network Scanner Tool Lite · Sharp Corporation
through V2.0.13.3 · source: vendor
Affected product
NS
Network Scanner Tool (Bundled software for Sharpdesk)
Sharp Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-62416
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-62416
corporate.jp.sharp
https://corporate.jp.sharp/info/product-security/advisory-list/2026-005/
global.sharp
https://global.sharp/corporate/info/product-security/advisory-list/2026-005/
jvn.jp
https://jvn.jp/en/vu/JVNVU92540957/
