CVE-2026-89177 HIGH

CVE-2026-89177: Howyar｜WeenyGenius - Use of Insecure Protocol

Vendor Howyar
Product WeenyGenius
Weakness CWE-757
Published September 11, 2026
Last update September 11, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.

Key dates

02Disclosure timeline

September 11, 2026 CVE published