CVE-2026-3738 — Incorrect Privilege Assignment in PET Grooming Management Software

CWE-266 — Incorrect Privilege AssignmentCWE-285 — Improper Authorization3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 87.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester PET Grooming Management SoftwareMayurik PET Grooming Management Software
Timeline
PublishedMar 8

Description

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Pet Grooming Management Software Financial Report improper authorization↗2026-03-08
▶
GHSA
GHSA-mxm9-6hj4-g563: A vulnerability was identified in SourceCodester Pet Grooming Management Software 1↗2026-03-08
▶
CVE-2026-3738 — Incorrect Privilege Assignment | cvebase