CVE-2026-68959

Severity: medium (CVSS 5.8 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-25 · updated 2026-08-28
Weakness: CWE-25

Description

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.

Affected products

Sky Co., LTD. SKYMEC IT Manager: Ver.2024.005.10a
Sky Co., LTD. SKYSEA Client View: from Ver.19.300.09h through Ver.21.210.01f

References

https://jvn.jp/en/jp/JVN33423625/
https://www.skyseaclientview.net/news/260824_01/

Get alerted when CVE-2026-68959 or the next vulnerability affects your stack