High severity · published Sep 11, 2026
CVE-2026-89176
Howyar|WeenyGenius - Missing Authentication
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas impersonating a teacher can induce student computers to initiate connections, thereby gaining remote control over the student endpoints.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
WeenyGenius · Howyar
through 12.2.031 · source: vendor
Affected product
WE
WeenyGenius
Howyar
More from WeenyGenius
8.8
CVE-2026-89178
Howyar|WeenyGenius - Origin Validation Error
8.8
CVE-2026-89177
Howyar|WeenyGenius - Use of Insecure Protocol
4.3
CVE-2026-89179
Howyar|WeenyGenius - Missing Support for Integrity Check