CVE-2026-68960
Received Received - Intake

Stack-Based Buffer Overflow in SKYSEA Client View

Vulnerability report for CVE-2026-68960, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: JPCERT/CC

Description

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sky skysea_client_view *
sky skymec_it_manager *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in SKYSEA Client View and SKYMEC IT Manager. It allows an attacker who can log into a Windows system with the affected software to execute arbitrary code on another Windows system running the same software if that system can receive UDP packets from the first system.

Impact Analysis

An attacker could exploit this to run malicious code on systems remotely, potentially gaining control over them. This could lead to data theft, system damage, or unauthorized access to sensitive information if the affected software is installed on multiple interconnected systems.

Mitigation Strategies

Apply the latest security patches or updates provided by SKYSEA Client View or SKYMEC IT Manager. Disable UDP packet reception from untrusted systems if possible. Restrict user login permissions to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68960. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart