# CVE-2026-39454: Sky Co. SKYSEA Client View and SKYMEC IT Manager privilege escalation

Source: https://junglewise.ai/threats/cve-2026-39454-sky-co-skysea-client-view-and-skymec-it-manager-privilege  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-20. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2026-39454 · Severity: high · CVSS 7.8 · Published 2026-04-20

SKYSEA Client View and SKYMEC IT Manager, which are tools used by organizations to manage their IT assets and computers, contain a security flaw in how they are installed on a system. Because the software's installation folder is not properly secured, a standard user without administrative rights can modify or add files to that folder. This could allow an attacker who already has basic access to a computer to take full control of the system with administrative privileges, potentially leading to data theft or complete system compromise.

Technologies: [Skygroup Skymec It Manager](https://junglewise.ai/threats/technologies/skymec-it-manager), [Skygroup Skysea Client View](https://junglewise.ai/threats/technologies/skysea-client-view). Vendors: [Skygroup](https://junglewise.ai/threats/vendors/skygroup).

## Quick answers

**Is CVE-2026-39454 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-39454 being exploited in the wild.

**How severe is CVE-2026-39454?** High severity, with a CVSS score of 7.8, published 20 April 2026.

**Which products and versions are affected?** Sky Co.,LTD. SKYSEA Client View Ver.21.200.07j and earlier; Sky Co.,LTD. SKYMEC IT Manager Ver.2024.005.10a and earlier.

**Is there a fix for CVE-2026-39454?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-39454 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-39454?** Check whether you run Skygroup Skymec It Manager or Skygroup Skysea Client View. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A local privilege escalation vulnerability exists in SKYSEA Client View and SKYMEC IT Manager due to incorrect default permissions (CWE-276) assigned to the product's installation folder. The root cause is an insecure ACL configuration that allows non-administrative users to write, modify, or replace files within the application directory. An attacker with low-privileged local access can exploit this by placing malicious binaries or DLLs in the folder, which are then executed by the application's high-privileged services. This results in arbitrary code execution with administrative or SYSTEM-level privileges. The vendor has released updates and patches to address this issue.

## Affected products

- Sky Co.,LTD. SKYSEA Client View Ver.21.200.07j and earlier
- Sky Co.,LTD. SKYMEC IT Manager Ver.2024.005.10a and earlier

## Timeline

- 2026-04-20: disclosed
- 2026-04-20: advisory

## References

- [https://jvn.jp/en/jp/JVN63376363/](https://jvn.jp/en/jp/JVN63376363/)
- [https://www.skyseaclientview.net/news/260420_01/](https://www.skyseaclientview.net/news/260420_01/)