Summary
SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
- Vendor
- SKYSEA
- Product
- Client View
- Added to KEV
- Oct 14, 2025
- Remediation due
- Nov 4, 2025 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-287
- EPSS
- 19.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References