CVE-2026-75987

SPLWare esProc up to 20260507 deserializes untrusted network input via ObjectInputStream.readUnshared in SocketData.java, enabling remote unauthenticated code execution (CVSS 7.5 HIGH). No fix or exploit details are provided. No in-the-wild exploitation reported.