A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. (CVE-2026-66109)

This vulnerability (CVE-2026-66109) involves missing authorization checks in SKYSEA Client View and SKYMEC IT Manager. Exploitation requires the attacker to have login access to the Windows system where the software is installed. Successful exploitation allows arbitrary code execution with SYSTEM-level privileges, representing a significant privilege escalation risk. The CVSS 3.0 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

If exploited, an attacker with local login access can gain SYSTEM privileges, enabling full control over the affected system. This can lead to complete compromise of the host, including access to sensitive data, system configuration changes, and disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local login access to trusted users only and monitor for suspicious activity on affected systems.