VulnSocial

CVE-2026-8326General

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection.  Depending on implementation, the vulnerability can be exploited by an unauthenticated attacker. This issue affects SparkView: before build 1127.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-23

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-29); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-29: 1Mentions · 2026-06-03: 1Technical Details · 2026-05-29: 1Technical Details · 2026-06-03: 105-2906-03
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-291
General1
2026-06-031
Disclosure1
Full discourse2 posts
  • kmkz@kmkz_security
    Disclosure

    GitHub Advisory Database /Unreviewed #CVE-2026-8326 "Path traversal vulnerability in Remote Spark SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. 👉The affected component is the RDP drive redirection"" https://github.com/advisories/GHSA-fhv3-q37g-rjx5

    Post summary

    The advisory announces a path‑traversal flaw in Remote Spark SparkView that permits arbitrary file access and remote code execution via RDP drive redirection.

    02020553
    19.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-8326 Path Traversal and Arbitrary File Access in Remote Spark SparkView... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8326 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post alerts to CVE‑2026‑8326 with a brief technical description of a path traversal flaw, but provides no evidence of a PoC, exploit tool, active exploitation, or patch details.

    0000048
    4.0K followersView on X

Explore more

Back to dashboard