Intel

CVE-2026-89178

WeenyGenius, ein Computerraum-Management-System von Howyar Technologies, weist einen Fehler bei der Ursprungsvalidierung auf.

highEPSS 0.4%

Description

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the attacker.

Source: cvelistv5NVD (NIST)

Metrics

XIEM Effective CVSS
8.8
Source: nvd-v3
EPSS percentile
27.4 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
high
Priority score
80.01
Exploit maturity
no public PoC known
CVSS v3
8.8
CVSS v4
8.7
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-09-11 07:36 UTC
CWE
CWE-940

Weakness classes (CWE)

  • CWE-940Base

    Improper Verification of Source of a Communication Channel

    The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

    cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-09-11 16:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • SSVC: {"id":"CVE-2026-89178","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
  2. New CVE Received2026-09-11 08:16 UTC· twcert@cert.org.tw
    • Description: WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the attacker.
    • CVSS V4.0: AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • CVSS V3.1: AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    • CWE: CWE-940