# CVE-2026-69665: Sky SKYSEA Client View and SKYMEC IT Manager incorrect default permissions

Source: https://junglewise.ai/threats/cve-2026-69665-sky-skysea-client-view-and-skymec-it-manager-incorrect-default  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-25. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-69665 · Severity: high · CVSS 7.8 · Published 2026-08-25

SKYSEA Client View and SKYMEC IT Manager are Windows-based IT management and endpoint control solutions used by organizations to monitor and manage corporate computers. This vulnerability allows any user who can log in locally to a Windows system running these products to execute code with SYSTEM (administrative) privileges, potentially giving attackers complete control over affected computers and the ability to compromise corporate networks.

## Quick answers

**Is CVE-2026-69665 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-69665 being exploited in the wild.

**How severe is CVE-2026-69665?** High severity, with a CVSS score of 7.8, published 25 August 2026.

**Which products and versions are affected?** Sky SKYSEA Client View Ver.21.300.12g and earlier; Sky SKYMEC IT Manager Ver.2025.205.08a and earlier.

**Is there a fix for CVE-2026-69665?** A patch was published on 2026-08-24: Updates and patches released by Sky Co., Ltd. via maintenance portals Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-69665 attacked?** It is attacked with local access, in a hosted service.

**Am I affected by CVE-2026-69665?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability stems from incorrect default file or directory permissions (CWE-276) in the installation of SKYSEA Client View and SKYMEC IT Manager. An authenticated local attacker with user-level privileges can exploit improperly configured permissions to execute arbitrary code with SYSTEM privilege. The attack requires local login access but no user interaction. The root cause lies in the installation process setting overly permissive ACLs on critical application files or directories. Patches and updated versions (SKYSEA Client View 21.310.01a and later, SKYMEC IT Manager fixes via patched modules) are available from the vendor.

## Affected products

- Sky SKYSEA Client View Ver.21.300.12g and earlier
- Sky SKYMEC IT Manager Ver.2025.205.08a and earlier

## Timeline

- 2026-08-24: disclosed
- 2026-08-25: advisory
- 2026-08-24: patched: Updates and patches released by Sky Co., Ltd. via maintenance portals

## References

- [https://jvn.jp/en/jp/JVN33423625/](https://jvn.jp/en/jp/JVN33423625/)
- [https://www.skyseaclientview.net/news/260824_01/](https://www.skyseaclientview.net/news/260824_01/)