CVE-2026-22679

概要

参考情報

• h4cker.zip/post/d5d211 · Broken Link
• ti.qianxin.com/vulnerability/notice-detail/1760 · Third Party Advisory
• vulncheck.com/advisories/weaver-e-cology-unauthenticated-rce-via-dubboapi-debug-endpoint · Third Party Advisory
• weaver.com.cn/cs/securityDownload.html · Patch
• blog.vega.io/posts/cve-2026-22679-weaver-ecology-exploitation

e-cology のその他の脆弱性

• CVE-2025-34038高 7.5A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user i…
• CVE-2024-48072緊急 9.8Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form…
• CVE-2024-48070緊急 9.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,…
• CVE-2024-48069緊急 9.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an…
• CVE-2024-48071中 6.5E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the ser…