CVE-2026-66109

8.5 highEPSS 0.2%

High (8.5). EPSS 0.2% chance of exploitation in the next 30 days.

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2026-08-25
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN33423625/
https://www.skyseaclientview.net/news/260824_01/

Check your stack JSON