Path Traversal Vulnerability in SKYSEA Client View and SKYMEC IT Manager
CVE-2026-68062

5.8MEDIUM

Key Information:

Vendor

Sky Co., Ltd.

Status
Skysea Client View
Skymec It Manager
Vendor
CVE Published:
25 August 2026

What is CVE-2026-68062?

SKYSEA Client View and SKYMEC IT Manager are susceptible to a path traversal vulnerability that could allow an authenticated attacker on a Windows system to execute arbitrary code on another compromised Windows system. This vulnerability arises from an incomplete resolution of a previous issue, enabling potential exploitation through UDP packets. It is crucial for users of these products to apply the necessary updates and patches to mitigate any associated risks.

Affected Version(s)

SKYMEC IT Manager Ver.2024.005.10a

SKYSEA Client View Ver.19.300.09h

References

https://www.skyseaclientview.net/news/260824_01/
https://jvn.jp/en/jp/JVN33423625/

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.