SKYSEA Client View Improper Authentication Vulnerability

CRITIQUE 9.8EXPLOITED (CISA KEV)CVE-2016-7836 · Published 09/06/2017 · updated 17/06/2026

SKYSEA Client View Improper Authentication Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 14/10/2025. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
skysea client view skygroup	`≤ 11.221.03`	No fix yet

Description

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

References

securityfocus.com/bid/95062 · Third Party Advisory
skyseaclientview.net/news/161221 · Vendor Advisory
jvn.jp/en/jp/JVN84995847/index.html · Third Party Advisory
skygroup.jp/security-info/170308.html · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2016-7836

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free