CVE-2026-89177CWE-757

CVE-2026-89177

High · published September 11, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-757 · Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
Published
2026-09-11T12:16Z
References (2)
https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html · [email protected]https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.html · [email protected]
EPSS history
Timeline
  • 12 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 11 SEP 07:35Z
    Howyar｜WeenyGenius - Use of Insecure Protocol
    cvelistv5