Weaver E-cology Critical RCE Actively Exploited | MSSP Advisory

A critical vulnerability in Weaver E-cology enterprise workflow platform has a CVSS score of 9.8 and allows remote code execution. The vulnerability is being actively exploited in the wild, potentially exposing enterprise workflow data and credential stores. The platform manages core business processes including document workflows and approval chains.

Your clients running Weaver E-cology are exposed to immediate compromise through their workflow systems, which typically handle sensitive documents and approval processes. If you manage networks with this platform and failed to warn clients about active exploitation, you face both technical remediation costs and potential contract liability for missing a critical advisory moment.