Auth bypass in Sky Co., Ltd. Skysea Client View

CVE-2026-66109

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-66109?
CVE-2026-66109 is a high-severity vulnerability in Sky Co., Ltd. Skysea Client View, classified under Missing Authorization. CVSS score: 7.8/10. Published 2026-08-25.
How severe is CVE-2026-66109?
High severity. CVSS v3 base score is 7.8 out of 10.