high7.8
CVE-2026-39454
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.
Impact
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Skygroup | Skymec It Manager | through 2024.005.10a |
| Skygroup | Skysea Client View | through 21.200.07j |