EUVD-2026-76006
GHSA-7wmc-3mj6-2c5j
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent network required for packet capture; no privileges needed; integrity-only impact (presence spoofing); no confidentiality or availability effect.
Primary rating from Vendor (twcert).
CVSS VectorVendor: twcert
Lifecycle Timeline
2DescriptionCVE.org
WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected.
AnalysisAI
Replay attack vulnerability in WeenyGenius, a computer lab management system by Howyar Technologies, allows unauthenticated adjacent-network attackers to forge student attendance status. By intercepting a legitimate student connection packet and replaying it, an attacker can make the management system believe the student remains connected after they have disconnected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be on the same adjacent network segment as the target student workstation - for example, connected to the same classroom LAN or Wi-Fi SSID. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N) correctly scopes this as an adjacent-network, low-complexity integrity issue with no confidentiality or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch with an exact fix version has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Weenygenius
View allWeenyGenius, a computer lab management system by Howyar Technologies, exposes its endpoint communication protocol withou
Origin validation failure in WeenyGenius, Howyar Technologies' computer lab management system, allows any unauthenticate
WeenyGenius computer lab management software by Howyar Technologies transmits control commands over ZMTP Null mode - Zer
Same weakness CWE-353 – Missing Support for Integrity Check
View allShare
External POC / Exploit Code
Leaving vuln.today