CVE-2026-3738CWE-266CWE-285
SourceCodester Pet Grooming Management Software Financial Report improper authorization
Medium · published March 8, 2026
What it is
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00403 · 33.4th percentile
- Weaknesses
- CWE-266 · Incorrect Privilege Assignment; CWE-285 · Improper Authorization
- Published
- 2026-03-08T13:32Z
EPSS history
Timeline