CyberSecBulletin

Sky vulnerabilities

We track 8 vulnerabilities in Sky products across 2 products. 8 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 25, 2026.

8vulnerabilities
1critical
7high
1exploited
8.3average CVSS score

Latest Sky vulnerabilities

  • 8.5 High severity

    SKYSEA Client View: Incorrect Default Permissions

    CVE-2026-69665Sky

    SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM p

  • 8.5 High severity

    SKYSEA Client View: Missing Authorization

    CVE-2026-66109Sky

    A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM pri

  • 8.5 High severity

    SKYSEA Client View: Incorrect Authorization

    CVE-2026-39454Sky

    SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the produ

  • 7.5 High severity

    SKYSEA Client View: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-41726Sky

    Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed.

  • 7.8 High severity

    SKYSEA Client View: Origin Validation Error

    CVE-2024-41143Sky

    Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows cli

  • 7.8 High severity

    SKYSEA Client View: Incorrect Privilege Assignment

    CVE-2024-41139Sky

    Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary cod

  • 7.8 High severity

    SKYSEA Client View: Improper Access Control

    CVE-2024-21805Sky

    Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC

  • 9.8 Critical severity

    SKYSEA Client View Improper Authentication Exploited

    CVE-2016-7836SkyEPSS 19.2%

    SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.