CVE-2026-89178
Howyar｜WeenyGenius - Origin Validation Error
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 11, 2026
- Updated
- Sep 11, 2026
- Reserved
- Sep 11, 2026
Description
WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the attacker.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | twcert |
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-940 Improper Verification of Source of a Communication Channel
Affected Products
| Product | Versions |
|---|---|
WeenyGeniusHowyar |
|
References
- https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.