
The Hacker News
Security•2026-05-05
Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API
A critical unauthenticated remote code execution vulnerability in Weaver E-cology enterprise platform (CVE-2026-22679, CVSS 9.8) has been actively exploited since March 17, 2026.