VULNERABILITY INTELLIGENCE

CVE-2026-6213

EPSS probability0.33%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26

Description

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.

Weakness classification

  • vulnerability@ncsc.ch: CWE-290

Primary references