CVE-2026-22679 2

Vulnerability (CVE)

Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

A critical unauthenticated remote code execution flaw in Weaver (Fanwei) E-cology, tracked as CVE-2026-22679 with a CVSS score of 9.8, affects version 10.0 prior to 20260312 through the "/papi/esearch/data/devops/dubboApi/debug/method" endpoint, where...

Zero-Days & Exploits

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, Web Socket Skimmers and More

Cyber Risks The Hacker News

Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...

Vulnerabilities & Patching