The vulnerability in SPLWare esProc up to 20260507 affects the deserialization process in the ObjectInputStream.readUnshared method of the SocketData.java source file. Improper handling of deserialization can lead to remote exploitation, potentially allowing attackers to manipulate serialized data to execute unauthorized actions. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The vulnerability has not been assigned a remediation level, and no patches or fixes are currently documented.

An attacker can remotely exploit this vulnerability to perform unsafe deserialization, which may lead to unauthorized code execution or other impacts depending on the deserialized data and application context. The CVSS score indicates a medium impact with limited confidentiality, integrity, and availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is documented. Until a patch is available, restrict network access to the affected service and monitor for suspicious activity related to deserialization attempts.