Pre-auth RCE in Enterprise Java When Middleware Becomes the Exploit