CVE-2026-39454CWE-276

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD

High · published April 20, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00152 · 4.0th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-04-20T08:04Z
EPSS history
Timeline
  • 20 APR 08:04Z
    SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD
    cvelistv5