BaselineWatch
Desk

CVE-2026-39454

8.5 high SSVC exploitation: none Analyzed

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 8.5 · skygroupNVD modified 2026-10-26 21:10

Affected (CPE criteria) 2

  • cpe:2.3:a:skygroup:skymec_it_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*

References 2