All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-6213
CRITICALpublished 2026-05-08 10:16 UTC · 3 months ago · modified 2026-06-17 11:00 UTC
10.0
CVSS / 10
// description
A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker.
// weaknesses (CWE)
- CWE-290
- CWE-807