MetInfo, Weaver E-cology Vulnerabilities in Attackers’ Crosshairs
Critical RCE vulnerabilities in MetInfo CMS and Weaver E-cology actively exploited by threat actors.
Threat actors have begun exploiting two critical-severity vulnerabilities: CVE-2026-29014 in MetInfo (CVSS 9.8), an unauthenticated PHP code injection flaw allowing remote code execution, and CVE-2026-22679 in Weaver E-cology (CVSS 9.3), an exposed debug endpoint vulnerability. Exploitation of MetInfo surged over the weekend targeting Singapore deployments, while Weaver E-cology attacks started within days of patch release in March, with attackers using the debug endpoint as a persistent shell for discovery commands.
AI summary of the linked source. Not reviewed by an editor. How this works
Run MetInfo?
Get an email when a new story names MetInfo, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-29014
- cve — CVE-2026-22679