Vulnerability · Published Aug 25, 2026 · Assigned by jpcert
CVE-2026-68959
High 8.5
In plain English
A high-severity security flaw in SKYMEC IT Manager from Sky Co., LTD.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sky Co., LTD. | SKYSEA Client View | Ver.19.300.09h – through Ver.21.210.01f |
| Sky Co., LTD. | SKYMEC IT Manager | Ver.2024.005.10a |
Weakness: CWE-25 · Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H