CVE-2026-8326
Critical
Description
Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection. Depending on implementation, the vulnerability can be exploited by an unauthenticated attacker. This issue affects SparkView: before build 1127.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSparkView
PublishedMay 29, 2026
First seenMay 29, 2026
Weakness typeCWE-23CWE-23
How to fix
Update
- Remote Spark (https://www.remotespark.com/) SparkViewbuild 1127 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Remote Spark (https://www.remotespark.com/) SparkView | v < build 1127 | build 1127 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.