Weaver E-cology Critical RCE Actively Exploited | MSSP Advisory

Hackers have been actively exploiting CVE-2026-22679, a critical vulnerability in Weaver E-cology office automation software, since mid-March to execute discovery commands on compromised systems. The vulnerability allows remote code execution without authentication, giving attackers immediate access to internal networks. Weaver E-cology is widely deployed in Asian markets for enterprise resource planning and office automation.

Your clients running Weaver E-cology systems have been sitting ducks for three months while attackers used this flaw to map their networks and establish persistence. If you manage any clients with Asian business operations or supply chain connections, they likely have this software deployed somewhere in their environment, and you need to know about every installation immediately.