Weaver E-cology Critical Vulnerability Active Exploitation | MSSP Advisory

Attackers are actively exploiting a critical vulnerability in Weaver E-cology, a Chinese workflow and document management platform. Vega documented active attacks targeting organizations primarily in China that use this platform for internal business processes. The exploitation grants attackers access to workflow systems and document repositories.

Your clients running Weaver E-cology face immediate compromise of their workflow systems and document stores, potentially exposing sensitive business data and internal processes. Any MSSP managing environments with this platform needs to act within hours to prevent client breaches that could trigger contract violations and retention issues.