CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

CVE-2026-51368 is a critical (CVSS 9.8) vulnerability in Beijing Tongtech tongweb v.7.0.24 , affecting the Spring HttpInovkerServiceExporter component. A remote attacker with no privileges or user interaction can execute arbitrary code by sending a crafted request to the console/heimdall endpoint...