CVE-2026-89177
Received Received - Intake

WeenyGenius Insecure ZMTP Null Mode Data Leak

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: TWCERT/CC

Description
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-89177
EUVD
EUVD-2026-76004

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
howyar_technologies weenygenius *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-757 A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

WeenyGenius, a computer lab management system by Howyar Technologies, uses an insecure protocol called ZMTP Null mode. This allows unauthenticated attackers on the same network to intercept data transmissions, leak sensitive information, or replay commands to disrupt classroom operations.

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for ZMTP Null mode usage. Use packet capture tools like Wireshark or tcpdump to inspect traffic for WeenyGenius communications. Look for unencrypted ZMTP protocol exchanges on expected ports.

Impact Analysis

Attackers could capture sensitive data transmitted between systems, such as student or administrative information. They might also inject malicious commands to disrupt lab operations, causing downtime or unauthorized access to systems.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating confidentiality requirements in GDPR and HIPAA. Organizations using WeenyGenius may fail compliance audits due to inadequate data protection measures.

Mitigation Strategies

Disable ZMTP Null mode in WeenyGenius configuration. Update to a patched version if available. Isolate WeenyGenius systems on a dedicated VLAN to limit network exposure. Monitor for unauthorized commands or data leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89177. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart