Missing Integrity Check in WeenyGenius by Howyar Technologies
CVE-2026-89179

5.3MEDIUM

Key Information:

Vendor

Howyar

Status
Weenygenius
Vendor
CVE Published:
11 September 2026

What is CVE-2026-89179?

The WeenyGenius system, developed by Howyar Technologies, is vulnerable to a Missing Support for Integrity Check issue. This flaw allows unauthenticated attackers on the same network to intercept packets from a student's connection. By replaying these intercepted packets, an attacker can create a significant security risk by falsely representing that the student remains connected to the system. Effective mitigation strategies are necessary to protect against such unauthorized access and to ensure the integrity of the connection.

Affected Version(s)

WeenyGenius 0 <= 12.2.031

References

https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.