CVE-2026-68959 is a path traversal vulnerability in SKYSEA Client View and SKYMEC IT Manager. An attacker with login access to a Windows system with the affected software installed can exploit this flaw to execute arbitrary code on another Windows system that also has the affected products installed and can receive UDP packets from the attacker’s system. The vulnerability stems from an incomplete remediation of CVE-2024-41726. The CVSS 3.0 base score is 8.5, indicating high severity, with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with limited privileges on one Windows system to execute arbitrary code on another Windows system running the affected software and reachable via UDP packets. This can lead to full compromise of the target system, including loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround information is provided at this time. Until a patch is available, restrict access to systems running the affected products and monitor for suspicious activity involving UDP traffic between systems.