SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co., LTD. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/862.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/22.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2024-41726' target='_blank'></a><a href='https://jvn.jp/en/jp/JVN84326763/' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/25.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2024-41726' target='_blank'></a><a href='https://jvn.jp/en/jp/JVN84326763/' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/121.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/276.html' target='_blank'></a><ul><li>Missing authorization (CWE-862) - CVE-2026-66109</li><li>Path traversal (CWE-22) - CVE-2026-68062</li><ul><li>This vulnerability is due to an incomplete fix for CVE-2024-41726, as mentioned in JVN#84326763.</li></ul><li>Path traversal (CWE-25) - CVE-2026-68959</li><ul><li>This vulnerability is due to an incomplete fix for CVE-2024-41726, as mentioned in JVN#84326763.</li></ul><li>Stack-based buffer overflow (CWE-121) - CVE-2026-68960</li><li>Incorrect default permissions (CWE-276) - CVE-2026-69665</li></ul>CVE-2026-66109, CVE-2026-68062, CVE-2026-68959, CVE-2026-68960 Ruslan Sayfiev and Denis Faiustov of Fujitsu Limitedreported these vulnerabilities to Sky Co., LTD. and coordinated. Sky Co., LTD…