Is CVE-2026-68959 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-68959 being exploited in the wild.

How severe is CVE-2026-68959?

High severity, with a CVSS score of 8.5, published 25 August 2026.

Which products and versions are affected?

Sky SKYSEA Client View Ver.19.300.09h to Ver.21.210.01f; Sky SKYMEC IT Manager Ver.2024.005.10a.

Is there a fix for CVE-2026-68959?

A patch was published on 2026-08-24: Updates and patches provided by Sky Co., Ltd.; SKYSEA Client View Ver.21.310.01a and later available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-68959 attacked?

It is attacked over the network.

Am I affected by CVE-2026-68959?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-68959: Sky SKYSEA Client View and SKYMEC IT Manager path traversal

CVE-2026-68959 · Severity: high · CVSS 8.5 · Published 2026-08-25

SKYSEA Client View and SKYMEC IT Manager are IT management and endpoint monitoring products used to manage Windows systems in corporate environments. A path traversal vulnerability allows an authenticated attacker on one Windows system to execute arbitrary code on another Windows system running these products that can receive UDP packets, potentially compromising critical infrastructure and enabling lateral movement across the network.

Quick answers

Is CVE-2026-68959 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-68959 being exploited in the wild.
How severe is CVE-2026-68959?: High severity, with a CVSS score of 8.5, published 25 August 2026.
Which products and versions are affected?: Sky SKYSEA Client View Ver.19.300.09h to Ver.21.210.01f; Sky SKYMEC IT Manager Ver.2024.005.10a.
Is there a fix for CVE-2026-68959?: A patch was published on 2026-08-24: Updates and patches provided by Sky Co., Ltd.; SKYSEA Client View Ver.21.310.01a and later available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-68959 attacked?: It is attacked over the network.
Am I affected by CVE-2026-68959?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a path traversal vulnerability (CWE-22/CWE-25) affecting the network communication between SKYSEA Client View and SKYMEC IT Manager components. The vulnerability requires an attacker to be authenticated on a Windows system with the affected product installed and the target system must be able to receive UDP packets from the attacker's system. An attacker can exploit this to execute arbitrary code on remote systems. This vulnerability is notably an incomplete fix for the previously disclosed CVE-2024-41726. Patches and updates are available from Sky Co., Ltd.

Affected products

Sky SKYSEA Client View Ver.19.300.09h to Ver.21.210.01f
Sky SKYMEC IT Manager Ver.2024.005.10a

Timeline

2026-08-24: disclosed
2026-08-24: patched: Updates and patches provided by Sky Co., Ltd.; SKYSEA Client View Ver.21.310.01a and later available

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.