SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.skyseaclientview.net/news/260420_01/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.5 · skygroupNVD modified 2026-10-26 21:10
Affected (CPE criteria) 2
cpe:2.3:a:skygroup:skymec_it_manager:*:*:*:*:*:*:*:*cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*
References 2
- https://jvn.jp/en/jp/JVN63376363/ Third Party Advisory
- https://www.skyseaclientview.net/news/260420_01/ Vendor Advisory