{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/esproc/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-75987"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["esProc"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["SPLWare"],"content_html":"\u003cp\u003eSPLWare esProc versions up to and including 20260507 are vulnerable to a remote deserialization flaw identified as CVE-2026-75987. The vulnerability exists in the \u003ccode\u003eObjectInputStream.readUnshared\u003c/code\u003e function located within \u003ccode\u003esrc/main/java/com/scudata/parallel/SocketData.java\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe flaw allows an unauthenticated remote attacker to pass untrusted serialized objects to the application, which are then improperly processed by the \u003ccode\u003ereadUnshared\u003c/code\u003e method. Because the application fails to validate the input before deserialization, an attacker can manipulate the object stream to achieve remote code execution (RCE) on the underlying server. Given the nature of Java deserialization vulnerabilities, successful exploitation typically results in complete system compromise. Organizations running SPLWare esProc should audit their instances for this version and evaluate the necessity of exposure to the network.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-75987 allows an unauthenticated remote attacker to achieve arbitrary code execution. This impacts the confidentiality, integrity, and availability of the host server. The vulnerability is present in the \u003ccode\u003eSocketData.java\u003c/code\u003e component, suggesting that any exposed network socket used for parallel processing or data transmission is a potential vector for attack.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade SPLWare esProc to a version later than 20260507 to remediate the vulnerability in \u003ccode\u003eSocketData.java\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eIsolate instances of esProc that are currently exposed to the internet until the patch is applied.\u003c/li\u003e\n\u003cli\u003eReview network access control lists (ACLs) to restrict access to ports utilized by esProc parallel processing services to trusted internal sources only.\u003c/li\u003e\n\u003cli\u003eMonitor application logs for unexpected deserialization errors or serialized object payloads that do not correspond to expected internal communication patterns.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-19T02:58:27Z","date_published":"2026-08-19T02:58:27Z","id":"https://feed.craftedsignal.io/briefs/2026-08-esproc-deserialization/","summary":"An unauthenticated remote deserialization vulnerability (CVE-2026-75987) in SPLWare esProc allows attackers to execute arbitrary code via the SocketData.java component.","title":"Deserialization Vulnerability in SPLWare esProc","url":"https://feed.craftedsignal.io/briefs/2026-08-esproc-deserialization/"}],"language":"en","title":"CraftedSignal Threat Feed - EsProc","version":"https://jsonfeed.org/version/1.1"}