CVE-2026-6213

Remote Spark SparkView RCE

State: Published
Severity: 10.0 Critical
Published: May 8, 2026
Updated: May 11, 2026
Reserved: Apr 13, 2026

Description

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.

Scores

CVSS	Score	Vector	Source
4.0	10.0 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A	NCSC.ch

Weaknesses

CWE-807 Reliance on untrusted inputs in a security decision
CWE-290 Authentication bypass by spoofing

Affected Products

Product	Versions
SparkViewRemote Spark (https://www.remotespark.com/)	before build 1122Affected

References

https://www.remotespark.com/view/new.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.