{"metadata": {"vulnerability": "CVE-2026-22679", "count": 78, "kinds": {"milestone": 4, "sighting": 55, "kev": 11, "other": 8}}, "data": [{"timestamp": "2026-01-08T19:04:26.365Z", "date_only": false, "value": "2026-01-08T19:04:26.365Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T13:16:45Z", "date_only": false, "value": "2026-04-07T13:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VG4V-XJCR-X7P5", "record": "GHSA-VG4V-XJCR-X7P5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-07T13:16:45.400Z", "date_only": false, "value": "2026-04-07T13:16:45.400", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22679", "record": "FKIE_CVE-2026-22679", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T13:29:59.333Z", "date_only": false, "value": "2026-04-07T13:29:59.333562Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-22679", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-07T13:29:59.333Z", "date_only": false, "value": "2026-04-07T13:29:59.333562Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22679", "record": "FKIE_CVE-2026-22679", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-07T15:21:06Z", "date_only": false, "value": "2026-04-07T15:21:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QBh1F_HyWJUCKYAyST3Bw6jIrLbUd_JEHanO8DcWQ_ylla0", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "76f7f838-7d04-4840-b888-b3121554ee40", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-07T15:30:49Z", "date_only": false, "value": "2026-04-07T15:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VG4V-XJCR-X7P5", "record": "GHSA-VG4V-XJCR-X7P5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T15:43:02.043Z", "date_only": false, "value": "2026-04-07T15:43:02.043148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miw4lq6m3a2g", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "a039431c-1a42-47e2-a677-f35b823436a4", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3miw4lq6m3a2g"}, {"timestamp": "2026-04-08T21:03:01.886Z", "date_only": false, "value": "2026-04-08T21:03:01.886706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtlyzn2l", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "719cd900-6159-43cd-b189-7e28aa8bea13", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtlyzn2l"}, {"timestamp": "2026-04-16T14:00:05Z", "date_only": false, "value": "2026-04-16T14:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/80557", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "7454efa4-3025-42e3-81bc-986653061f12", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22679\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a keraattin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-16 13:56:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCritical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at /papi/esearch/data/devops/dubboApi/debug/method. Comprehensive analysis, proof-of-concept, and detection guidance included.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80557", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-16T15:00:13Z", "date_only": false, "value": "2026-04-16T15:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/13SJvff8QI2qaATds71XzXY76pj2q7KNSKHIOkghUW-N2nM", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "046aac78-5b36-46cb-bd04-98eebed1d8d3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-16T21:00:04Z", "date_only": false, "value": "2026-04-16T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YdSs7ODl4GqLLTJMVDK5lc2sRwnfVBIE8xXSYrBaURrpR0I", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "4c16434d-523f-4405-ba46-330688d902bc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-04T22:13:13.995Z", "date_only": false, "value": "2026-05-04T22:13:13.995897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3ml2oyd3p4u2f", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "e8ae8002-6384-40de-aa64-22910eb66028", "content": "Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands.", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3ml2oyd3p4u2f"}, {"timestamp": "2026-05-04T22:14:37Z", "date_only": false, "value": "2026-05-04T22:14:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/24602", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "50eb758e-64dc-4349-95a3-154812ab389a", "content": "\u200aWeaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]\n\nhttps://www.bleepingcomputer.com/news/security/weaver-e-cology-critical-bug-exploited-in-attacks-since-march/", "url": "https://t.me/BleepingComputer/24602"}, {"timestamp": "2026-05-05T00:47:32.628Z", "date_only": false, "value": "2026-05-05T00:47:32.628598Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ml2xlqkigdo2", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "f2faf5c4-9f6b-4745-a854-3f606bb6f342", "content": "Weaver E-cology critical bug exploited in attacks since March BleepingComputer Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since ...\n\n#Security #News\n\nOrigin | Interest | Match", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ml2xlqkigdo2"}, {"timestamp": "2026-05-05T01:45:23.353Z", "date_only": false, "value": "2026-05-05T01:45:23.353840Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3ml32tnnq4k2s", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "f0c5f1b2-0507-4fad-9b65-1d98df5ce730", "content": "A critical unauthenticated RCE (CVE-2026-22679) exploited since March in Weaver E-cology 10.0 via an exposed debug API allowed remote command execution. Patch released March 12 removes the vulnerable endpoint. #WeaverEcology #RemoteCodeExec #China", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3ml32tnnq4k2s"}, {"timestamp": "2026-05-05T02:02:56.470Z", "date_only": false, "value": "2026-05-05T02:02:56.470081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3ml33t3cxic2v", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "5cd01f6d-f53a-4934-a38d-f4eee996b13c", "content": "\ud83d\udd12 Weaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-Ma...\n\nhttps://is.gd/m3Ibyb #CyberSecurity #InfoSec #CrustyTLDR", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3ml33t3cxic2v"}, {"timestamp": "2026-05-05T02:29:53.558Z", "date_only": false, "value": "2026-05-05T02:29:53.558497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ml35daxrws2s", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "f8241786-bc89-4e3e-888d-07c6ae9db8e3", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 540 interactions\nCVE-2026-41940: 82 interactions\nCVE-2026-3854: 57 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-31431: 59 interactions\nCVE-2026-41940: 8 interactions\nCVE-2026-22679: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3ml35daxrws2s"}, {"timestamp": "2026-05-05T05:37:00Z", "date_only": false, "value": "2026-05-05T05:37:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/05/weaver-e-cology-rce-flaw-cve-2026-22679.html", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "9fab442a-672c-4a1a-9873-f8506e24385e", "content": "A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild.\nThe vulnerability (CVE-2026-22679, CVSS score: 9.8) relates to a case of unauthenticated remote code execution affecting Weaver E-cology 10.0 versions prior to 20260312. The issue resides in the \"/papi/esearch/data/devops/", "url": "https://thehackernews.com/2026/05/weaver-e-cology-rce-flaw-cve-2026-22679.html"}, {"timestamp": "2026-05-05T05:51:03.207Z", "date_only": false, "value": "2026-05-05T05:51:03.207609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Dunuq-Vumuc.technodon.org.ap.brid.gy/post/3ml3ikt6roxr2", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "bfde45e6-5ba1-41d8-a3fb-c60024b1dd62", "content": "https://www.bleepingcomputer.com/news/security/weaver-e-cology-critical-bug-exploited-in-attacks-since-march/\nWeaver E-cologyn RCE-haavoittuvuutta hy\u00f6dynnettiin p\u00e4ivi\u00e4 p\u00e4ivityksen j\u00e4lkeen Kriittist\u00e4 todentamatonta RCE-haavoittuvuutta CVE-2026-22679", "url": "https://bsky.app/profile/Dunuq-Vumuc.technodon.org.ap.brid.gy/post/3ml3ikt6roxr2"}, {"timestamp": "2026-05-05T07:59:09.222Z", "date_only": false, "value": "2026-05-05T07:59:09.222363Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml3ppzk6h22o", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "f4391691-dc97-4926-ac5a-d5c170e573b0", "content": "Weaver E-cology 10.0\uff0820260312\u4ee5\u524d\uff09\u306b\u672a\u8a8d\u8a3c\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027(CVE-2026-22679)\u304c\u3042\u308a\u3001\u30c7\u30d0\u30c3\u30b0API\u7d4c\u7531\u3067\u653b\u6483\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3ml3ppzk6h22o"}, {"timestamp": "2026-05-05T08:04:00Z", "date_only": false, "value": "2026-05-05T08:04:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/10137", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "5a0bcd3a-6f7c-4cd6-b2d8-46ffc24d4f63", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API \u2013 thehackernews.com\n\nTue, 05 May 2026 15:37:00", "url": "https://t.me/TengkorakCyberCrewzz/10137"}, {"timestamp": "2026-05-05T08:04:35Z", "date_only": false, "value": "2026-05-05T08:04:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/249738", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "6d6c623f-b049-4845-be12-96afb3c86613", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API\nhttps://ift.tt/4ymdNMF", "url": "https://t.me/ctinow/249738"}, {"timestamp": "2026-05-05T08:08:24.713Z", "date_only": false, "value": "2026-05-05T08:08:24.713726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3ml3qal3teu2l", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "8aecee66-6fef-4eca-853e-0c292102cdc2", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "url": "https://bsky.app/profile/ninjaowl.ai/post/3ml3qal3teu2l"}, {"timestamp": "2026-05-05T08:30:41.043Z", "date_only": false, "value": "2026-05-05T08:30:41.043192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ml3rifgyxg27", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "eb39bcd3-425a-4a6d-b3b9-e5afd0b7a999", "content": "Critical Weaver E-cology Flaw (CVE-2026-22679) Actively Exploited in the Wild: Enterprise Systems Under Silent\u00a0Attack\n\nIntroduction: A Silent Breach in a Widely Used Enterprise Platform A severe security vulnerability has emerged in Weaver (Fanwei) E-cology, a widely deployed enterprise office\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3ml3rifgyxg27"}, {"timestamp": "2026-05-05T08:36:12Z", "date_only": false, "value": "2026-05-05T08:36:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/89290", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "037e6bcc-cc47-4a75-9731-ac45cfec2b6d", "content": "\ud83d\udd8b\ufe0f Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API \ud83d\udd8b\ufe0f\n\nA critical security vulnerability in Weaver Fanwei Ecology, an enterprise office automation OA and collaboration platform, has come under active exploitation in the wild. The vulnerability CVE202622679, CVSS score 9.8 relates to a case of unauthenticated remote code execution affecting Weaver Ecology 10.0 versions prior to 20260312. The issue resides in the \"papiesearchdatadevops.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/89290"}, {"timestamp": "2026-05-05T10:04:41.525Z", "date_only": false, "value": "2026-05-05T10:04:41.525112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml3wqiwkrw2x", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "c5958160-f54c-4322-a959-e8b65eb2e28e", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml3wqiwkrw2x"}, {"timestamp": "2026-05-05T10:10:00.963Z", "date_only": false, "value": "2026-05-05T10:10:00.963631Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3ml3wzztpyp2n", "record": "cve-2026-22679", "field": "creation_timestamp", "uuid": "58ac261b-cc44-4efa-a3a4-3024c541c738", "content": "A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The vulnera...\n\n\ud83d\udd17 https://thehackernews.com/2026/05/weaver-e-cology-rce-flaw-cve-2026-22679.html", "url": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3ml3wzztpyp2n"}, {"timestamp": "2026-05-05T10:14:00Z", "date_only": false, "value": "2026-05-05T10:14:00.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OaXGB-QpjGmfdhJKy3Jn2jl_9ESBxfjhibxXHQG2GIhYVg", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "18a3091b-268a-46f5-be92-7d6dda175de0"}, {"timestamp": "2026-05-05T10:37:43.919Z", "date_only": false, "value": "2026-05-05T10:37:43.919019Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3ml3yllsd2j2o", "record": "cve-2026-22679", "field": "creation_timestamp", "uuid": "40c44438-5ce1-4a9b-a796-0fdf9f902f68", "content": "\ud83d\udcf0 Bug Kritis Weaver E-cology Dieksploitasi dalam Serangan Sejak Maret\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/05/bug-kritis-weaver-e-cology-dieksploitasi-dalam-serangan-sejak-maret/\n\n#ahmandonkTechNews #beritaTeknologi #cve-2026-22679 #cybercrime #keamananSiber #kerentan", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3ml3yllsd2j2o"}, {"timestamp": "2026-05-05T10:37:44.532Z", "date_only": false, "value": "2026-05-05T10:37:44.532257Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3ml3ylm7kj725", "record": "cve-2026-22679", "field": "creation_timestamp", "uuid": "2b445578-d3b3-4923-9540-a93ef6ca443d", "content": "\ud83d\udcf0 Bug Kritis Weaver E-cology Dieksploitasi dalam Serangan Sejak Maret\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/05/bug-kritis-weaver-e-cology-dieksploitasi-dalam-serangan-sejak-maret/\n\n#ahmandonkTechNews #beritaTeknologi #cve-2026-22679 #potatocrime #keamananSiber #kerentan", "url": "https://bsky.app/profile/potato.software/post/3ml3ylm7kj725"}, {"timestamp": "2026-05-05T10:55:43Z", "date_only": false, "value": "2026-05-05T10:55:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/8932", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "b5c2b27e-d96b-4857-a709-9c042d9e0360", "content": "\ud83d\udea8 Critical RCE flaw (CVE-2026-22679, CVSS 9.8) in Weaver E-cology 10.0 is under active exploitation.\n\nAttackers use unauthenticated requests to execute commands; activity observed since March 17\u201331, 2026, with failed payload drops & MSI attempts.\n\nDetails \ud83d\udc49 https://thehackernews.com/2026/05/weaver-e-cology-rce-flaw-cve-2026-22679.html", "url": "https://t.me/thehackernews/8932"}, {"timestamp": "2026-05-05T11:43:23.727Z", "date_only": false, "value": "2026-05-05T11:43:23.727537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3ml44ay7fhq2h", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "7beb74a5-fd97-4591-90ef-782a9d4f6393", "content": "Weaver E-cology users are discovering the hard way that their office automation platform\u2019s debug API is basically an invitation for active exploitation. This critical CVE-2026-22679 flaw allows attackers to bypass whatever meager defenses were in place to achieve remote code ex...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3ml44ay7fhq2h"}, {"timestamp": "2026-05-05T12:29:26.360Z", "date_only": false, "value": "2026-05-05T12:29:26.360594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3ml46tcv6bb2k", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "08291fab-b380-4244-9d32-ca2d4a7635d0", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3ml46tcv6bb2k"}, {"timestamp": "2026-05-05T13:39:47.937Z", "date_only": false, "value": "2026-05-05T13:39:47.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-22679", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-05T15:31:34Z", "date_only": false, "value": "2026-05-05T15:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VG4V-XJCR-X7P5", "record": "GHSA-VG4V-XJCR-X7P5", "field": "modified"}, {"timestamp": "2026-05-05T16:00:56.293Z", "date_only": false, "value": "2026-05-05T16:00:56.293630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3ml4knj4cph2o", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "232e93da-2ca2-42b4-94a1-1d8755484c2f", "content": "Une faille critique RCE dans #Weaver E-cology (<20260312) est activement exploit\u00e9e via l\u2019API Debug (CVE-2026-22679, CVSS 9.8). Risque majeur d\u2019ex\u00e9cution de code \u00e0 distance non authentifi\u00e9e \u26a0\ufe0f #CyberSecurity #Automatisation ", "url": "https://bsky.app/profile/calimegai.bsky.social/post/3ml4knj4cph2o"}, {"timestamp": "2026-05-05T20:52:35.358Z", "date_only": false, "value": "2026-05-05T20:52:35.358590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3ml52wy6bjc2j", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "21338861-0c34-4acf-b4a8-3d9c6eb74fff", "content": "CTI Daily 2026-05-04: Weaver E-cology CVE-2026-22679 exploited ITW since March. MS criticals in GNU Binutils & libssh2. Safepay hits 5 victims, 6 countries. ShinyHunters leaks 119k Vimeo emails via Anodot.\n\nFull brief: intel.overresearched.net/2026/05/05/c...\n\n#Daily #ThreatIntel #InfoSec", "url": "https://bsky.app/profile/intel.overresearched.net/post/3ml52wy6bjc2j"}, {"timestamp": "2026-05-05T22:01:10.257Z", "date_only": false, "value": "2026-05-05T22:01:10.257008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ml56rnjacc2g", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "6547c617-6e1f-46c5-a257-072dba3f1174", "content": "Weaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3ml56rnjacc2g"}, {"timestamp": "2026-05-06T01:21:21.579Z", "date_only": false, "value": "2026-05-06T01:21:21.579559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ml5jxms6e22g", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "fb83ccc5-ad1f-408b-9e4c-da3bbe693dcb", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API\n\nA critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild.\nThe vulnerability (CVE-2026-226\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3ml5jxms6e22g"}, {"timestamp": "2026-05-06T16:08:47.927Z", "date_only": false, "value": "2026-05-06T16:08:47.927698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ml73kh3zle2b", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "f3320baf-ec23-45ac-8120-4cbd592b70c3", "content": "Critical RCE vulnerability CVE-2026-22679 in Weaver E-cology exploited in the wild. Update to build 20260312 immediately to secure your systems. #CyberSecurity #WeaverEcology #RCE Link: thedailytechfeed.com/critical-rce...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3ml73kh3zle2b"}, {"timestamp": "2026-05-07T05:42:06.031Z", "date_only": false, "value": "2026-05-07T05:42:06.031497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mlaiyosjyj2h", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "b9094da9-4cc2-417f-8566-fb2eed078ce8", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API thehackernews.com/2026/05/weav...", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mlaiyosjyj2h"}, {"timestamp": "2026-05-08T03:42:02.545Z", "date_only": false, "value": "2026-05-08T03:42:02.545989Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116536883309183392", "record": "cve-2026-22679", "field": "creation_timestamp", "uuid": "31f21ad0-e938-4a58-9ad6-6719b7da1e6e", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API https://thehackernews.com/2026/05/weaver-e-cology-rce-flaw-cve-2026-22679.html", "url": "https://infosec.exchange/users/patrickcmiller/statuses/116536883309183392"}, {"timestamp": "2026-07-14T15:53:29.433Z", "date_only": false, "value": "2026-07-14T15:53:29.433Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T15:53:29.433Z", "date_only": false, "value": "2026-07-14T15:53:29.433Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-22679", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-22679", "field": "evidence.0.details.added_date", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-22679", "field": "status.status_updated_at", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T08:18:07Z", "date_only": false, "value": "2026-07-19T08:18:07+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T08:18:07Z", "date_only": false, "value": "2026-07-19T08:18:07+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-22679", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T16:00:05.155Z", "date_only": false, "value": "2026-07-19T16:00:05.155477Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/21317", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "62feef26-24b2-4f37-882c-0b77f9acfa6c", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API \u2013 thehackernews.com\n\nTue, 05 May 2026 15:37:00", "url": "https://t.me/MalaysiaHacktivistz/21317"}, {"timestamp": "2026-07-19T16:00:08.663Z", "date_only": false, "value": "2026-07-19T16:00:08.663167Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1786", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "71f070df-3e1b-428a-b827-85da7e15e0f9", "content": "\ud83d\udc31 hacker voice: I'M IN YOUR OFFICE \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-22679: RCE \u0432 Weaver E-cology\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f! \ud83d\ude31\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0443\u043c\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u2014 \u044d\u0442\u043e \u0441\u043a\u0443\u0447\u043d\u043e, \u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u044b. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Weaver (Fanwei) E-cology \u043d\u0430\u0448\u043b\u0438 \u0434\u044b\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0439 API.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /papi/esearch/data/devops/dubboApi/debug/method. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043a\u0440\u0443\u0442\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u043a \u0434\u0435\u0431\u0430\u0433-\u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0441\u0442\u043e \u0448\u043b\u0435\u0442 POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0432\u0443\u0430\u043b\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u041f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 (\u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b MSI-\u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b)\n\u2014 RCE \u0431\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u0442 12.03.2026.\n2\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a /papi/ \u0441\u043d\u0430\u0440\u0443\u0436\u0438.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u0437\u0435\u0440\u043a\u0430\u043b\u043e \u0438 \u0441\u043f\u0440\u043e\u0441\u0438\u0442\u044c: \u00ab\u041f\u043e\u0447\u0435\u043c\u0443 \u043c\u043e\u0439 \u0434\u0435\u0431\u0430\u0433 \u0442\u043e\u0440\u0447\u0438\u0442 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442?\u00bb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c 0-day \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445? \u0422\u0435\u0431\u0435 \u0441\u044e\u0434\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80", "url": "https://t.me/critical_bug/1786"}, {"timestamp": "2026-07-19T16:00:08.701Z", "date_only": false, "value": "2026-07-19T16:00:08.701892Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1787", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "64e5ce9f-bb06-4f1f-820d-611759193467", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-22679", "url": "https://t.me/critical_bug/1787"}, {"timestamp": "2026-07-20T00:00:08.837Z", "date_only": false, "value": "2026-07-20T00:00:08.837299Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1787", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "32546d96-66ef-45dd-9c31-55147cce971e", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-22679", "url": "https://t.me/critical_bug/1787", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T00:00:08.873Z", "date_only": false, "value": "2026-07-20T00:00:08.873313Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/critical_bug/1786", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "159a6b30-1863-4c02-a4e8-dccd4d4ee1d7", "content": "\ud83d\udc31 hacker voice: I'M IN YOUR OFFICE \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-22679: RCE \u0432 Weaver E-cology\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f! \ud83d\ude31\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0443\u043c\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u2014 \u044d\u0442\u043e \u0441\u043a\u0443\u0447\u043d\u043e, \u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u044b. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Weaver (Fanwei) E-cology \u043d\u0430\u0448\u043b\u0438 \u0434\u044b\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0439 API.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /papi/esearch/data/devops/dubboApi/debug/method. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043a\u0440\u0443\u0442\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u043a \u0434\u0435\u0431\u0430\u0433-\u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0441\u0442\u043e \u0448\u043b\u0435\u0442 POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0432\u0443\u0430\u043b\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u041f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 (\u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b MSI-\u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b)\n\u2014 RCE \u0431\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u0442 12.03.2026.\n2\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a /papi/ \u0441\u043d\u0430\u0440\u0443\u0436\u0438.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u0437\u0435\u0440\u043a\u0430\u043b\u043e \u0438 \u0441\u043f\u0440\u043e\u0441\u0438\u0442\u044c: \u00ab\u041f\u043e\u0447\u0435\u043c\u0443 \u043c\u043e\u0439 \u0434\u0435\u0431\u0430\u0433 \u0442\u043e\u0440\u0447\u0438\u0442 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442?\u00bb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c 0-day \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445? \u0422\u0435\u0431\u0435 \u0441\u044e\u0434\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80", "url": "https://t.me/critical_bug/1786", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T00:00:22.130Z", "date_only": false, "value": "2026-07-20T00:00:22.130493Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/21317", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "1f8965a3-9e77-44cc-96d7-1cb2129ecfb3", "content": "Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API \u2013 thehackernews.com\n\nTue, 05 May 2026 15:37:00", "url": "https://t.me/MalaysiaHacktivistz/21317", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T11:00:02Z", "date_only": false, "value": "2026-07-20T11:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T11:00:30.267Z", "date_only": false, "value": "2026-07-20T11:00:30.267983Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6e69532-3fcd-4c6f-8614-6b20e1245334", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "0199c649-5312-4262-a765-2864e3e6de20", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6e69532-3fcd-4c6f-8614-6b20e1245334", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T01:01:08.699Z", "date_only": false, "value": "2026-07-21T01:01:08.699569Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9cb1737-7723-4770-910b-4784f902f6f7", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "4aaf7dc0-a037-4d24-a0e4-a8159355faf2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9cb1737-7723-4770-910b-4784f902f6f7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T11:12:53.369Z", "date_only": false, "value": "2026-08-03T11:12:53.369663Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "9dabae29-79f9-40ba-b5f6-91e10d32cbaf", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T20:00:16.113Z", "date_only": false, "value": "2026-08-29T20:00:16.113914Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1541", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "7452b4bf-637d-4019-9689-65fad917b018", "content": "Critical RCE flaw (CVE-2026-22679, CVSS 9.8) in Weaver E-cology 10.0 is under active exploitation.\n\nAttackers use unauthenticated requests to execute commands; activity observed since March 17\u201331, 2026, with failed payload drops & MSI attempts.", "url": "https://t.me/CyberDispatch/1541"}, {"timestamp": "2026-08-29T20:00:16.245Z", "date_only": false, "value": "2026-08-29T20:00:16.245532Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1533", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "51c68494-3ca5-4985-b342-4587a7d46419", "content": "eaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API.", "url": "https://t.me/CyberDispatch/1533"}, {"timestamp": "2026-08-31T00:00:36.511Z", "date_only": false, "value": "2026-08-31T00:00:36.511348Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1533", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "615112cc-6598-41c6-afe8-224a3f58a238", "content": "eaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API.", "url": "https://t.me/CyberDispatch/1533", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-31T00:00:36.663Z", "date_only": false, "value": "2026-08-31T00:00:36.663763Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1541", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "fbd8a57e-bf30-42a4-91d9-8e399cbdf218", "content": "Critical RCE flaw (CVE-2026-22679, CVSS 9.8) in Weaver E-cology 10.0 is under active exploitation.\n\nAttackers use unauthenticated requests to execute commands; activity observed since March 17\u201331, 2026, with failed payload drops & MSI attempts.", "url": "https://t.me/CyberDispatch/1541", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-18T05:00:07.656Z", "date_only": false, "value": "2026-09-18T05:00:07.656062Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42295", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "ca32f766-b7f7-4367-8ca9-91189173e147", "content": "Weaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]\nhttps://www.bleepingcomputer.com/news/security/weaver-e-cology-critical-bug-exploited-in-attacks-since-march/", "url": "https://t.me/VulnerabilityNews/42295"}, {"timestamp": "2026-09-19T00:00:40.721Z", "date_only": false, "value": "2026-09-19T00:00:40.721047Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42295", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "d6b81350-612d-4f87-a314-f9864f60f530", "content": "Weaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]\nhttps://www.bleepingcomputer.com/news/security/weaver-e-cology-critical-bug-exploited-in-attacks-since-march/", "url": "https://t.me/VulnerabilityNews/42295", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "64641b35-5218-4314-923f-006bca047ddf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "22ee0275-b25e-443a-a812-768ba0ed88bf"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-07)", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "6884c716-1262-4df4-ac88-6513764b3e16"}, {"timestamp": "2026-10-26T21:00:04Z", "date_only": false, "value": "2026-10-26T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Z45F1Soc-TWgs6MqV-fFAKWLGb68PdWuCOnR5U7jG7zm8wI", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "82b28add-280b-4481-b11a-cdcf2f7eddef", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-26T21:00:04Z", "date_only": false, "value": "2026-10-26T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Z45F1Soc-TWgs6MqV-fFAKWLGb68PdWuCOnR5U7jG7zm8wI", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "e6009814-085b-4ae7-bd1d-3246d309c0c4"}, {"timestamp": "2026-10-26T21:10:00.170Z", "date_only": false, "value": "2026-10-26T21:10:00.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22679", "record": "FKIE_CVE-2026-22679", "field": "lastModified"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-22679", "field": "timestamps.last_seen_at", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-22679", "field": "evidence.0.details.observation_date", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-22679", "field": "status.status_updated_at", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T01:00:01Z", "date_only": false, "value": "2026-10-29T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-22679", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d9cb1737-7723-4770-910b-4784f902f6f7", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-10-29T21:24:59.356Z", "anchors": {"origin": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-07T15:21:06Z", "date_only": false, "value": "2026-04-07T15:21:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QBh1F_HyWJUCKYAyST3Bw6jIrLbUd_JEHanO8DcWQ_ylla0", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "76f7f838-7d04-4840-b888-b3121554ee40", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 8852917.211, "hours": 2459.143669722222, "days": 102.46431957175925, "min_seconds": 8852917.211, "max_seconds": 8939317.211, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 8852917.211, "hours": 2459.143669722222, "days": 102.46431957175925, "min_seconds": 8852917.211, "max_seconds": 8939317.211, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 8983.211, "hours": 2.4953363888888886, "days": 0.10397234953703703, "min_seconds": 8983.211, "max_seconds": 8983.211, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-07T15:21:06Z", "date_only": false, "value": "2026-04-07T15:21:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QBh1F_HyWJUCKYAyST3Bw6jIrLbUd_JEHanO8DcWQ_ylla0", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "76f7f838-7d04-4840-b888-b3121554ee40", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 17742816.567408, "hours": 4928.560157613333, "days": 205.35667323388887, "min_seconds": 17742816.567408, "max_seconds": 17742816.567408, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T12:51:22.789Z", "date_only": false, "value": "2026-04-07T12:51:22.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22679", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:24:59.356Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 8889899.356408, "hours": 2469.416487891111, "days": 102.89235366212964, "min_seconds": 8803499.356408, "max_seconds": 8889899.356408, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-22679", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6e69532-3fcd-4c6f-8614-6b20e1245334", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-29T21:24:59.356Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 17733833.356408, "hours": 4926.064821224444, "days": 205.25270088435184, "min_seconds": 17733833.356408, "max_seconds": 17733833.356408, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T15:21:06Z", "date_only": false, "value": "2026-04-07T15:21:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QBh1F_HyWJUCKYAyST3Bw6jIrLbUd_JEHanO8DcWQ_ylla0", "record": "CVE-2026-22679", "field": "creation_timestamp", "uuid": "76f7f838-7d04-4840-b888-b3121554ee40", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T21:24:59.356Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}