A vulnerability was found in xiandafu beetl up to 3.20.2 . It has been rated as critical . Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction . The manipulation leads to improper neutralization of special elements used in an expression language statement. This vulnerability is referenced as CVE-2026-8759 . Remote exploitation of the attack is possible. Furthermore, an exploi