VULNERABILITY INTELLIGENCE

CVE-2026-39454

CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-04-20
Last modified2026-10-26
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.

Weakness classification

  • vultures@jpcert.or.jp: CWE-276
  • nvd@nist.gov: CWE-863

Primary references