CVE-2026-3738mediumCWE-266CWE-285

CVE-2026-3738: medium-severity vulnerability in SourceCodester Pet Grooming Management Software

SourceCodester Pet Grooming Management Software Financial Report improper authorization

Published · Updated

Follow this CVE+ Monitor Pet Grooming Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Pet Grooming Management Software
Related CVEs — SourceCodester Pet Grooming Management Software

In the same product, most dangerous first.

CVE-2025-10801MEDIUMSourceCodester Pet Grooming Management Software edit_tax.php sql injectionEPSS 0.6%CVE-2025-10840MEDIUMSourceCodester Pet Grooming Management Software print-payment.php sql injectionEPSS 0.5%CVE-2025-10839MEDIUMSourceCodester Pet Grooming Management Software inv-print.php sql injectionEPSS 0.5%CVE-2025-11057MEDIUMSourceCodester Pet Grooming Management Software print_inv.php sql injectionEPSS 0.5%CVE-2025-10836MEDIUMSourceCodester Pet Grooming Management Software print1.php sql injectionEPSS 0.5%CVE-2025-10832MEDIUMSourceCodester Pet Grooming Management Software fetch_product_details.php sql injectionEPSS 0.5%