The vulnerability CVE-2026-22475 in axiomthemes Estate involves deserialization of untrusted data, enabling object injection attacks. This issue affects all versions up to 1.3.4. Exploitation can be performed remotely without authentication or user interaction, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting critical severity. No patch or official remediation guidance is currently provided, and no known exploits have been observed in the wild.

Successful exploitation of this vulnerability can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of service. The critical CVSS score reflects the potential for severe impact on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable application and monitor for unusual activity related to object deserialization. Avoid processing untrusted serialized data if possible.