A critical vulnerability in the Weaver E-cology office automation system, identified as CVE-2026-22679, has been exploited by hackers since mid-March to execute discovery commands. This bug allows attackers to gain a foothold in targeted systems, potentially leading to further malicious activities. The exploitation of this vulnerability has significant implications for organizations using the Weaver E-cology system, as it expands their active attack surface. Specifically, the vulnerability enables hackers to run discovery commands, which can be used to gather sensitive information about the targeted system. The fact that this bug has been exploited in attacks since March1 highlights the need for organizations to prioritize patching and mitigation based on their exposure and evidence of exploitation. This vulnerability matters to practitioners because it necessitates a thorough review of their system's security posture to prevent potential breaches.