Attackers are actively exploiting a critical remote code execution flaw in Weaver E-cology, a popular enterprise office automation platform, with a CVSS score of 9.8 — meaning no login is required to compromise affected systems running versions released before March 12, 2026.