CVE-2026-68062CWE-22path-traversal

CVE-2026-68062

High · published August 25, 2026

CVSS v3.0
8.5
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.

The record
Technical detail
CVSS v3.0
8.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
5.8 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00654 · 50.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-25T11:17Z
References (2)
https://jvn.jp/en/jp/JVN33423625/ · [email protected]https://www.skyseaclientview.net/news/260824_01/ · [email protected]
EPSS history
Timeline
  • 26 AUG 08:22Z
    EPSS moved — → 1%
    epss
  • 25 AUG 06:27Z
    SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability
    cvelistv5