CVE-2026-89176: Howyar Weenygenius

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas impersonating a teacher can induce student computers to initiate connections, thereby gaining remote control over the student endpoints.

Affected products

• Howyar Weenygenius: up to and including 12.2.031

Published 2026-09-11. Last modified 2026-09-11.