Weaver E-cology Critical Bug Exploited in Attacks Since March

BleepingComputer reports that a critical vulnerability, CVE-2026-22679, in Weaver E-cology office automation software has been under active exploitation since mid-March. Attackers are leveraging this flaw to execute discovery commands on affected systems, indicating initial reconnaissance and potentially paving the way for deeper compromise.

Weaver E-cology is a widely used office automation platform, particularly prevalent in certain regions. The exploitation of this critical bug highlights a significant supply chain risk for organizations relying on this software. Attackers are clearly prioritizing initial access and internal network mapping, which is a precursor to data exfiltration, ransomware deployment, or long-term persistence.

This isn’t a theoretical threat; it’s a confirmed active campaign. Defenders need to recognize that once discovery commands run successfully, an attacker has a foothold and is actively understanding the target environment. The next steps are predictable: privilege escalation, lateral movement, and ultimately, objective fulfillment.