Path Traversal Vulnerability in SKYSEA Client View and SKYMEC IT Manager Software
CVE-2026-68959

5.8MEDIUM

Key Information:

Vendor

Sky Co., Ltd.

Status
Skysea Client View
Skymec It Manager
Vendor
CVE Published:
25 August 2026

What is CVE-2026-68959?

The SKYSEA Client View and SKYMEC IT Manager software contain a path traversal vulnerability that could be exploited by an authenticated attacker. Once logged into a vulnerable Windows system, the attacker may execute arbitrary code on another Windows system hosting the same software upon receiving UDP packets from it. This issue emerges from an incomplete fix for a previous vulnerability, underscoring the ongoing need for comprehensive security updates and assessments.

Affected Version(s)

SKYMEC IT Manager Ver.2024.005.10a

SKYSEA Client View Ver.19.300.09h

References

https://www.skyseaclientview.net/news/260824_01/
https://jvn.jp/en/jp/JVN33423625/

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.