#weaver

1 article

Security Alerts Apr 7, 2026

CVE-2026-22679: Unauthenticated RCE via Dubbo debug endpoint in Weaver E-cology

Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows atta...