Back to overview

CVE-2026-6213

CRITICAL
10.0
CVSS 4.0
Description
A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.

Metadata

CVE ID
CVE-2026-6213
State
PUBLISHED
Assigner
NCSC.ch
Reserved
2026-04-13 12:27 UTC
Published
2026-05-08 09:04 UTC
Last updated
2026-05-11 07:48 UTC
Primary CWE
CWE-807
CWE-807 Reliance on untrusted inputs in a security decision
Vendor / Product
Remote Spark (https://www.remotespark.com/) / SparkView
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Remote Spark (https://www.remotespark.com/) SparkView — 0 < build 1122
Weakness (CWE)
CWESourceDescription
CWE-290 cna CWE-290 Authentication bypass by spoofing
CWE-807 cna CWE-807 Reliance on untrusted inputs in a security decision
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A
References (1)
Back to overview