CVE-2026-39454

Katalog CVE

CVSS 8.5 · High EPSS 0,15%

Kerentanan Incorrect Default Permissions pada skygroup skymec it manager, skygroup skysea client view. Skor CVSS 4.0 8.5 (High) menurut jpcert.or.jp.

Deskripsi (NVD)

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.

Rincian

Terbit di NVD

20 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 4.0

8.5 (High), sumber jpcert.or.jp
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.skyseaclientview.net/news/260420_01/ advisory vendor
• https://jvn.jp/en/jp/JVN63376363/ advisory pihak ketiga