CVE-2026-8326
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A path traversal vulnerability in Remote Spark SparkView allows reading and writing arbitrary files in all directories as root, leading to remote code execution (RCE). The affected component is the RDP drive redirection. Depending on the implementation, the vulnerability can be exploited by an unauthenticated attacker.
Risk Assessment
The risk for the organization includes full system compromise, as an attacker can access sensitive data, modify system files, or take control of the server without authentication.
Recommendation
It is recommended to immediately update SparkView to build 1127 or later, which includes a fix for the vulnerability. Additionally, restrict access to the RDP service and monitor logs for suspicious activities.
Original NVD description (English source)
Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection. Depending on implementation, the vulnerability can be exploited by an unauthenticated attacker. This issue affects SparkView: before build 1127.