CVE-2026-75987

Name of the Vulnerable Software and Affected Versions SPLWare esProc versions prior to 20260507

Description An issue exists where performing a manipulation leads to deserialization, which is the process of converting a byte stream back into an object. This occurs within the ObjectInputStream.readUnshared() function located in the src/main/java/com/scudata/parallel/SocketData.java file, allowing for remote exploitation.

Recommendations Update to a version released after 20260507. As a temporary workaround, restrict access to the ObjectInputStream.readUnshared() function to minimize the risk of exploitation.