CVE-2026-66109
Received Received - Intake

Arbitrary Code Execution in SKYSEA Client View and SKYMEC IT Manager

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: JPCERT/CC

Description
A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-66109
EUVD
EUVD-2026-65308

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sky_co_ltd skysea_client_view to 21.210.01f (inc)
sky_co_ltd skymec_it_manager From 2023.225.03a (inc) to 2024.005.10a (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-66109 is a missing authorization vulnerability in SKYSEA Client View and SKYMEC IT Manager. An attacker who gains access to a Windows system with the affected software installed can exploit this flaw to execute arbitrary code with SYSTEM privileges.

Impact Analysis

This vulnerability allows attackers to run malicious code with full system control on affected Windows systems. It can lead to data theft, system compromise, unauthorized access, or installation of additional malware.

Mitigation Strategies

Apply the update module or patch provided on the vendor's maintenance contract website for affected SKYSEA Client View (Ver.21.210.01f or earlier) and SKYMEC IT Manager (Ver.2023.225.03a or 2024.005.10a) versions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66109. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart