CVE-2026-89177— Howyar｜WeenyGenius - Use of Insecure Protocol
Quick assessment
Affected
Howyar WeenyGenius
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WeenyGenius 是由 Howyar Technologies 开发的计算机实验室管理系统，该系统存在“使用不安全协议”漏洞。由于依赖 ZMTP Null 模式，同一网络中的未认证攻击者可以捕获数据包头以泄露传输的数据，或者通过伪造命令执行重放攻击，从而干扰课堂操作。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89177
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Howyar｜WeenyGenius - Use of Insecure Protocol
Source: CVE Program / CVE List V5
Vulnerability Description
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在会话协商时选择低安全性的算法(算法降级)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Howyar | WeenyGenius | 0 ~ 12.2.031 | - |
|
II. Public POCs for CVE-2026-89177
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89177
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-89177 (2)
Same Patch Batch · Howyar · 2026-09-11 · 4 CVEs total
| CVE-2026-89178 | 8.8 HIGH | Howyar｜WeenyGenius - Origin Validation Error |
| CVE-2026-89176 | 8.8 HIGH | Howyar｜WeenyGenius - Missing Authentication |
| CVE-2026-89179 | 4.3 MEDIUM | Howyar｜WeenyGenius - Missing Support for Integrity Check |
IV. Related Vulnerabilities
Same weakness: CWE-757
-
CVE-2026-72887
Net::OAuth::Client versions before 0.32 for Perl allow the s -
CVE-2026-18691
Improper Authentication in MongoDB Intra-Cluster Connections -
CVE-2026-55953
TLS 1.2 and DTLS client accepts unoffered anonymous cipher s -
CVE-2026-4942
IBM i is Affected by Algorithm Downgrade in Transport Layer -
CVE-2026-6092
Encrypt-then-MAC could fall back to MAC-then-Encrypt when HA
V. Comments for CVE-2026-89177
No comments yet