CVE-2026-62416 describes a vulnerability in Sharp Corporation's Network Scanner Tool and Network Scanner Tool Lite where the initial configuration does not require authentication and permits unlimited file uploads. This insecure default setting allows any unauthenticated user to connect to the device and upload files without restriction. The primary impact is a potential denial-of-service condition on the PC due to resource exhaustion. Furthermore, if a malicious file is uploaded and executed by a user, it could be used to launch attacks on other entities from the compromised PC. No official remediation or patch information is currently available.

The vulnerability allows unauthenticated attackers to upload unlimited files to the affected products, which can lead to denial-of-service conditions on the PC hosting the software. There is also a risk that malicious files uploaded could be executed by users, potentially enabling further attacks originating from the compromised PC. No confidentiality or integrity impacts are indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid using the products with default initial configurations that allow unauthenticated unlimited file uploads. Applying additional access controls or network restrictions to limit access to the affected tools may help reduce exposure.