CVE-2026-66109: Sky Co., Ltd Skymec It Manager

High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

Affected products

• Sky Co., Ltd Skymec It Manager: version 2023.225.03a only; version 2024.005.10a only
• Sky Co., Ltd SKYSEA Client View: up to and including 21.210.01f

Published 2026-08-25. Last modified 2026-08-28.