Bleepingcomputer Active Exploitation of Weaver E-cology RCE Vulnerability CVE-2026-22679
Article Content
- •CVE-2026-22679 is a critical RCE vulnerability with a CVSS score of 9.8.
- •Active exploitation began in mid-March 2026, shortly after a security update was released.
- •Users of Weaver E-cology 10.0 are advised to upgrade to the latest version to mitigate risks.
A critical vulnerability (CVE-2026-22679) in the Weaver E-cology platform is being actively exploited. This unauthenticated remote code execution flaw affects Weaver E-cology 10.0 builds released before March 12, 2026. The vulnerability stems from an exposed debug API endpoint that allows attackers to execute arbitrary commands without authentication. Attacks began in mid-March 2026, shortly after a security update was released, and researchers observed multiple phases of exploitation, including attempts to deploy malicious payloads. Despite the attackers' efforts, endpoint defenses blocked most of their activities, and no persistent sessions were established. Users are urged to apply the latest security updates to mitigate the risk. The CVSS score for this vulnerability is 9.8, indicating its critical nature. The vendor's fix removes the debug endpoint entirely, making immediate updates essential for affected organizations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Weaver E-cology and CVE-2026-22679 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…