https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:37:08.573221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336555 EUVD-2026-336555 2026-10-03T20:37:08.618615+00:00 EUVD-2026-336555 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22679 fkie_cve-2026-22679 2026-10-03T20:37:08.618659+00:00

Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arbitrary commands by invoking exposed debug functionality. Attackers can craft POST requests with attacker-controlled interfaceName and methodName parameters to reach command-execution helpers and achieve arbitrary command execution on the system. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-03-31 (UTC).

 https://cve.radiocsirt.org/vuln/ghsa-vg4v-xjcr-x7p5 GHSA-vg4v-xjcr-x7p5 2026-10-03T20:37:08.618698+00:00

Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arbitrary commands by invoking exposed debug functionality. Attackers can craft POST requests with attacker-controlled interfaceName and methodName parameters to reach command-execution helpers and achieve arbitrary command execution on the system. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-03-31 (UTC).