CVE-2026-66109CWE-862broken-access-control

CVE-2026-66109

High · published August 25, 2026

CVSS v3.0
7.8
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.5 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-08-25T11:17Z
References (2)
https://jvn.jp/en/jp/JVN33423625/ · [email protected]https://www.skyseaclientview.net/news/260824_01/ · [email protected]
EPSS history
Timeline
  • 26 AUG 08:21Z
    EPSS moved — → 0%
    epss
  • 25 AUG 06:27Z
    A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager
    cvelistv5