CVE-2026-60011 is a vulnerability in Sharp Corporation's multifunction printers where direct requests (forced browsing) to access certain image data stored on the device are not properly authorized. This improper authorization flaw could allow an unauthenticated remote attacker to access image data without permission. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

An unauthenticated attacker can remotely access certain image data stored on affected Sharp and Toshiba Tec MFP devices due to improper authorization controls. The confidentiality of image data is impacted, but integrity and availability are not affected. This could lead to unauthorized disclosure of sensitive images stored on the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided by Sharp Corporation, restrict network access to the affected MFP devices and monitor for unauthorized access attempts. Avoid exposing these devices directly to untrusted networks.