{"id":"CVE-2026-6213","state":"PUBLISHED","title":"Remote Spark SparkView RCE","description":"A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.","publishedAt":"2026-05-08T09:04:24.188Z","updatedAt":"2026-05-11T07:48:23.801Z","severity":{"score":10,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A","source":"NCSC.ch"},"assigner":"NCSC.ch","products":["Remote Spark (https://www.remotespark.com/) SparkView"],"affected":[{"vendor":"Remote Spark (https://www.remotespark.com/)","product":"SparkView","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"build 1122","versionType":"custom"}]}],"references":["https://www.remotespark.com/view/new.html"],"weaknesses":["CWE-807","CWE-290"],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/6xxx/CVE-2026-6213.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-6213","state":"PUBLISHED","datePublished":"2026-05-08T09:04:24.188Z","dateUpdated":"2026-05-11T07:48:23.801Z","assignerShortName":"NCSC.ch","assignerOrgId":"455daabc-a392-441d-aa46-37d35189897c","dateReserved":"2026-04-13T12:27:34.073Z"},"containers":{"cna":{"title":"Remote Spark SparkView RCE","descriptions":[{"lang":"en","value":"A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker."}],"affected":[{"vendor":"Remote Spark (https://www.remotespark.com/)","product":"SparkView","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"build 1122","versionType":"custom"}]}],"references":[{"url":"https://www.remotespark.com/view/new.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"ATTACKED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"CRITICAL","baseScore":10,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-807","lang":"en","description":"CWE-807 Reliance on untrusted inputs in a security decision","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-290","lang":"en","description":"CWE-290 Authentication bypass by spoofing","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC.ch","orgId":"455daabc-a392-441d-aa46-37d35189897c","dateUpdated":"2026-05-11T07:48:23.801Z"},"impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]},{"capecId":"CAPEC-176","descriptions":[{"lang":"en","value":"CAPEC-176 Configuration/Environment Manipulation"}]},{"capecId":"CAPEC-242","descriptions":[{"lang":"en","value":"CAPEC-242 Code Injection"}]}],"workarounds":[{"lang":"en","value":"Customer can also set trustLocal = false in the gateway.conf as a workaround for this problem if they cannot update to build 1122 or later.","supportingMedia":[{"type":"text/html","base64":false,"value":"<pre>Customer can also set trustLocal = false in the gateway.conf as a workaround for this problem if they cannot update to build 1122 or later.</pre>"}]}],"credits":[{"lang":"en","value":"Manuel Feifel of InfoGuard Labs","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-08T12:44:56.474943Z","id":"CVE-2026-6213","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-08T12:45:06.500Z"}}]}}}