Description
泛微E-cology10 存在远程代码执行漏洞未经身份验证的远程攻击者可利用该漏洞向特定接口发送恶意请求，在目标服务器上执行任意代码，进而获取服务器权限。
泛微E-cology10 dubboApi 存在远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AE%20E-Cology10%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/janepeak/p/18376077
https://www.vulncheck.com/advisories/weaver-e-cology-unauthenticated-rce-via-dubboapi-debug-endpoint
https://qkl.seebug.org/vuldb/ssvid-99871
https://blog.vega.io/posts/cve-2026-22679-weaver-ecology-exploitation/
https://cn-sec.com/archives/3084271.html
https://www.secevery.com/toBugInfo?id=1825717811528507394
https://h4cker.zip/
https://x.com/akaclandestine/status/2041084909683356057