CVE-2026-89179

WeenyGenius, ein Computerraum-Management-System von Howyar Technologies, hat eine Schwachstelle aufgrund des Fehlens der Unterstützung fü…

Description

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected.

Source: cvelistv5 NVD (NIST)

Metrics

XIEM Effective CVSS

5.3

Source: cna-v4

EPSS percentile

4.6 %

Low — this CVE sits in the lower 10% of all CVEs scored today.

KEV status

—

Show all metrics

Severity

medium

56.67

no public PoC known

4.3

5.3

0.2 %

Low — model estimates < 1% exploitation likelihood.

Published

2026-09-11 07:37 UTC

CWE

CWE-353

Weakness classes (CWE)

CWE-353Base
Missing Support for Integrity Check
The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.
cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

CVE Modified2026-09-11 16:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
- SSVC: {"id":"CVE-2026-89179","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
New CVE Received2026-09-11 08:16 UTC· twcert@cert.org.tw
- Description: WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected.
- CVSS V4.0: AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS V3.1: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CWE: CWE-353