Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-20 | 4 | Disclosure4 |
| 2026-04-21 | 1 | General1 |
『コンピューター内の実行プロセスに留まる脆弱性であることからリモートで悪意のあるコードを実行させるようなものではございません』 4月20日 Ｓｋｙ株式会社 SKYSEA Client View、SKYMEC IT Manager 【重要】不適切なファイルアクセス権設定の脆弱性（CVE-2026-39454） https://www.skyseaclientview.net/news/260420_01/
Post summary
The post announces CVE‑2026‑39454 as an inappropriate file‑access‑rights setting vulnerability that remains local and does not permit remote code execution.
【重要】不適切なファイルアクセス権設定の脆弱性（CVE-2026-39454）https://www.skyseaclientview.net/news/260420_01/
Post summary
The post simply points to a source that notes an improper file permission issue associated with CVE‑2026‑39454, without providing PoC, exploit, patch, or active exploitation details.
SKYSEA Client View・SKYMEC IT Managerに権限昇格の脆弱性（CVE-2026-39454） https://rocket-boys.co.jp/security-measures-lab/skysea-skymec-privilege-escalation-cve-2026-39454/ #セキュリティ対策Lab #security #securitynews
Post summary
The tweet announces the discovery of a privilege escalation vulnerability (CVE‑2026‑39454) in SKYSEA Client View/SKYMEC IT Manager, linking to a blog post for further details.
CVE-2026-39454 Arbitrary Code Execution via Improper File Permissions in SKYSEA Client View and SKYMEC IT Manager https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39454
Post summary
The post announces CVE‑2026‑39454, labeling it as an arbitrary code execution flaw caused by improper file permissions in SKYSEA client software, but offers no PoC, exploit, or mitigation details.
CVE-2026-39454 SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrativ… https://www.cve.org/CVERecord?id=CVE-2026-39454
Post summary
The text highlights CVE-2026-39454’s issue of improper file permissions in SKYSEA products, but provides no exploit, patch, or active exploitation details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | skygroup | skymec_it_manager | - | - | - |
| App | skygroup | skysea_client_view | - | - | - |