CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368: Deserialization of Untrusted Data

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

Beijing Tongtech Co., Ltd tongweb v.7.0.24 is vulnerable to remote code execution (RCE) due to a flaw in the Spring HttpInovkerServiceExporter component. A remote attacker can trigger this vulnerability by sending a crafted request to the console/heimdall endpoint. The vulnerability is categorize...

EUVD-2026-66175

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

PT-2026-81857

Name of the Vulnerable Software and Affected Versions tongweb version 7.0.24 Description An issue in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code by sending a crafted request to the 'console/heimdall' endpoint. Recommendations At the moment,...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...