CVE-2026-75987
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability was found in SPLWare esProc up to version 20260507, involving deserialization in the ObjectInputStream.readUnshared function in SocketData.java. Manipulation leads to unsafe deserialization, and the attack can be performed remotely.
Risk Assessment
A remote attacker could exploit this vulnerability to execute unauthorized code or cause system crashes, potentially compromising data confidentiality and integrity.
Recommendation
It is recommended to immediately update SPLWare esProc to the latest patched version and restrict access to services exposed to deserialization.
Original NVD description (English source)
A vulnerability was found in SPLWare esProc up to 20260507. This affects the function ObjectInputStream.readUnshared of the file src/main/java/com/scudata/parallel/SocketData.java. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible.