CVE-2026-69665

HighCVSS 8.5/10Last modified Aug 28, 2026

Description

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege.

Metrics

CVSS 4.0 8.5/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Aug 25, 2026
Last modified: Aug 28, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-696698.8Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.CVE-2026-69676.5Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authen CVE-2026-696718.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-696725.5Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.CVE-2026-696737.8Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally CVE-2026-696745.5Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security fe CVE-2026-696755.5Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.CVE-2026-696768.8Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.CVE-2026-696788.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-696795.7Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.CVE-2026-69686.5Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to w CVE-2026-696808.1Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.