CVE-2026-89177
Howyar｜WeenyGenius - Use of Insecure Protocol
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 11, 2026
- Updated
- Sep 11, 2026
- Reserved
- Sep 11, 2026
Description
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | twcert |
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-757 / CWE-319 / CWE-353
Affected Products
| Product | Versions |
|---|---|
WeenyGeniusHowyar |
|
References
- https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.