Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-39454: SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD

28
Routine
HIGH 7.8UPGRADEUPGRADE

CVE-2026-39454 is a high-severity flaw (CVSS 7.8) affecting skymec it manager, skysea client view. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score7.8 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.1% (top 99%)
CISA exploited listNo
WeaknessCWE-276, CWE-863
Published2026-04-20
Last modified2026-10-26
Publisher (CNA): JPCERT/CC · Vendor: skygroup

Share: LinkedIn · X · Reddit

Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

skygroup skymec it manager UPGRADE
Affected: <= 2024.005.10a
Fixed in: newer than 2024.005.10a
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy skymec-it-manager || rpm -q skymec-it-manager || skymec-it-manager --version
2. UPGRADE to newer than 2024.005.10a (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade skymec-it-manager
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade skymec-it-manager
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
skygroup skysea client view UPGRADE
Affected: <= 21.200.07j
Fixed in: newer than 21.200.07j
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy skysea-client-view || rpm -q skysea-client-view || skysea-client-view --version
2. UPGRADE to newer than 21.200.07j (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade skysea-client-view
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade skysea-client-view
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-39454?

skymec it manager: upgrade to newer than 2024.005.10a; skysea client view: upgrade to newer than 21.200.07j. Exact commands for each OS are on this page.

Is CVE-2026-39454 being exploited?

CVE-2026-39454 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-39454 affect?

CVE-2026-39454 affects skymec it manager, skysea client view. Severity is high (CVSS 7.8). SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation

How urgent is CVE-2026-39454?

Priority 28/100. High severity

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.