Read the docs
TI-2026-44535 Aliases CVE-2026-62416GHSA-44px-2m24-8wv4

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with…

Priority LOW 37CWE-1188Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00639 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Sharp CorporationNetwork Scanner Tool Liteup to V2.0.13.3—No fix listedCNA
Sharp CorporationNetwork Scanner Tool (Bundled software for Sharpdesk)up to V6.1.1.8—No fix listedCNA
  • Network Scanner Tool Lite VendorSharp Corporation Affected up to V2.0.13.3 Fixed in — No fix listed CNA
  • Network Scanner Tool (Bundled software for Sharpdesk) VendorSharp Corporation Affected up to V6.1.1.8 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-62416
  2. 2026-10-03 Alias added: GHSA-44px-2m24-8wv4
  3. 2026-10-24 EPSS moved to the 50th–90th percentile

References

Other 3

  • TI-2019-02935 Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT… KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-22196 Authentication bypass in Sharp Corporation Multiple MFPs CVSS 3.1CRITICAL 9.1
  • TI-2024-38467 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html CVSS 4.0HIGH 8.7
  • TI-2024-24071 Out-of-bounds read in Sharp Corporation Multiple MFPs CVSS 3.1HIGH 7.5
  • TI-2019-02936 Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq… CVSS 3.1CRITICAL 9.8
  • TI-2024-15783 OS command injection in Sharp Corporation Energy Management Controller with Cloud Services CVSS 3.1CRITICAL 9.8
See all 67 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences