CVE-2026-89179

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - twcert@cert.org.tw

Published

2026-09-11

Last modified

2026-09-11

Weaknesses

CWE-353

Affected products

• Weenygenius (Howyar)

References

• https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html
• https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.html