← back
CVE-2026-3738

SourceCodester Pet Grooming Management Software Financial Report improper authorization

CVSS 5.3 MEDIUMEPSS 0.3%CWE-266CWE-285
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Mar 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Pet Grooming Management Software

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.mdhttps://vuldb.com/?ctiid.349716https://vuldb.com/?id.349716https://vuldb.com/?submit.767321https://www.sourcecodester.com/