CVE-2026-75987: SPLWare esProc SocketData.java ObjectInputStream.readUnshared deserialization
A vulnerability was found in SPLWare esProc up to 20260507. This affects the function ObjectInputStream.readUnshared of the file src/main/java/com/scudata/parallel/SocketData.java. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
SPLWare esProc versions up to 20260507 are affected. The vulnerable code is in src/main/java/com/scudata/parallel/SocketData.java, in the ObjectInputStream.readUnshared function.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the potential impact of successful exploitation?
The rating vector indicates low impact to confidentiality, integrity, and availability. The described flaw allows remote manipulation leading to deserialization.