Vulnerability in Sky Co., Ltd. Skymec It Manager
CVE-2026-68959
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.
CVSS v3 metric
CVSS v3 base score 8.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Sky Co., Ltd. Skymec It Manager — versions Ver.2024.005.10a
- Sky Co., Ltd. Skysea Client View
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-68959?
- CVE-2026-68959 is a high-severity vulnerability in Sky Co., Ltd. Skymec It Manager, classified under CWE-25. CVSS score: 8.5/10. Published 2026-08-25.
- How severe is CVE-2026-68959?
- High severity. CVSS v3 base score is 8.5 out of 10.