CVE-2026-68960: sky co., ltd. skymec it manager Stack-based Buffer Overflow
Vulnerability summary
CVE-2026-68960 is a high (CVSS 8.5) Stack-based Buffer Overflow vulnerability in sky co., ltd. skymec it manager. EPSS estimates a 0.61% chance of exploitation in the next 30 days, higher than 48.4% of scored vulnerabilities.
Timeline
- 25-08-2026PublishedVulnerability first disclosed.
- 25-08-2026Last modifiedVulnerability information updated.
Description
A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system.
CVSS metrics
4 scores · 2 sources · 2 versions- NVDNIST5.8MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVDNIST8.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.61%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
0.00 pp
From 0.61% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Sky co., ltd.2 products
- skymec it manager2023.225.03a | 2024.005.10a
- skysea client view≤ Ver.21.210.01f
1 vendor · 2 products