CVE-2026-68959: SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerabi

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the aff

Status

Published

2026-08-25

Updated

2026-08-25

Assigning organization

jpcert

Description

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sky Co., LTD. SKYSEA Client View

Default version status: unaffected

Ver.19.300.09h to ≤ Ver.21.210.01faffected

Sky Co., LTD. SKYMEC IT Manager