This vulnerability in SPLWare esProc up to version 20260507 involves unsafe deserialization in the ObjectInputStream.readUnshared method within the source file src/main/java/com/scudata/parallel/SocketData.java. An attacker can remotely exploit this flaw by manipulating deserialization inputs, potentially leading to security issues. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impacts. No known exploits are reported in the wild.

The vulnerability allows remote attackers to manipulate deserialization processes, which can lead to unauthorized actions or compromise of the affected system's integrity, confidentiality, or availability to a limited extent. The CVSS score of 6.9 reflects a medium severity impact with low-level impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Users should monitor vendor communications for updates and apply any official patches once available.