PT-2026-38902 · Remote Spark · Sparkview

Manuel Feifel · Published 2026-05-08 · Updated 2026-05-09 · CVE-2026-6213

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Remote Spark SparkView versions prior to build 1122

Description An issue in the local connection check allows an attacker to bypass security restrictions and achieve arbitrary code execution as root on the server side. Depending on the implementation, this can be exploited by an unauthenticated attacker.

Recommendations Update to build 1122 or later.

Fix

RCE

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-807

CWE-290

Related Identifiers

CVE-2026-6213

Affected Products

Sparkview

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6213 · Security Note
• https://remotespark.com/view/new.html · Note
• https://t.me/cveNotify/162693 · Telegram Post
• https://twitter.com/CVEnew/status/2053174686171664557 · Twitter Post
• https://t.me/CVEtracker/53104 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2052735025888510418 · Twitter Post