PT-2026-44831 · Remote Spark · Sparkview

Manuel Feifel · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-8326

Mitre

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection.  Depending on implementation, the vulnerability can be exploited by an unauthenticated attacker.

This issue affects SparkView: before build 1127.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-8326

Affected Products

Sparkview

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-8326 · Security Note
• https://remotespark.com/view/new.html · Note