The vulnerability identified as CVE-2026-22475 affects the Estate product by axiomthemes. It is a deserialization of untrusted data issue that permits object injection attacks. This can allow an attacker to execute arbitrary code or manipulate application logic remotely without authentication or user interaction. The affected versions include all releases up to 1.3.4. The CVSS v3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating a critical severity level with high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full system compromise, including unauthorized code execution and data manipulation. The vulnerability affects the confidentiality, integrity, and availability of the affected system. No exploits are currently known in the wild, but the critical severity score reflects the potential for severe impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting network access to the affected application and applying any available workarounds recommended by the vendor once published.