Weaver E-cology Unauthenticated RCE Debug API | MSSP Advisory

Weaver E-cology enterprise automation platform contains a critical unauthenticated remote code execution vulnerability (CVE-2026-22679) with a CVSS score of 9.8. Attackers exploit the /papi/esearch/data/devops debug API endpoint to execute arbitrary commands without authentication on versions prior to 20260312. The flaw is under active exploitation in the wild.

If your RMM or PSA integrates with Weaver E-cology platforms for client workflow management, compromised instances provide direct access to your management infrastructure and all connected client networks. Your clients running this platform face immediate remote takeover risk, and failing to warn them about an actively exploited 9.8 CVSS flaw creates liability exposure when breaches occur.