CVE-2026-51368

CVE-2026-51368 is a critical (CVSS 9.8) vulnerability in Beijing Tongtech tongweb v.7.0.24 , affecting the Spring HttpInovkerServiceExporter component. A remote attacker with no privileges or user interaction can execute arbitrary code by sending a crafted request to the console/heimdall endpoint...