CVE-2026-68959: Path Traversal: '/../filedir' in Sky Co., LTD. SKYSEA Client View

CVE-2026-68959 is a path traversal vulnerability in SKYSEA Client View and SKYMEC IT Manager. Exploitation requires an attacker to have login access to a Windows system with the affected software installed. The attacker may then execute arbitrary code on another Windows system that also has the affected products installed and can receive UDP packets from the compromised system. This vulnerability stems from an incomplete remediation of CVE-2024-41726. The CVSS v3.0 score is 8.5, indicating high severity, with network attack vector, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

An attacker with login privileges on an affected Windows system may leverage this vulnerability to execute arbitrary code on another Windows system running the affected products and capable of receiving UDP packets from the attacker-controlled system. This could lead to full compromise of the target system, including loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented in the provided information. Until a patch is available, restrict login access to trusted users and monitor for suspicious activity related to UDP communications between systems running the affected products.