CVE-2026-3738: mayurik pet_grooming_management_software Incorrect Privilege Assignment

Vulnerability summary

CVE-2026-3738 is a medium (CVSS 6.5) Incorrect Privilege Assignment vulnerability in mayurik pet_grooming_management_software. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-03-2026
   PublishedVulnerability first disclosed.
2. 12-03-2026
   Last modifiedVulnerability information updated.

Description

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

• CWE-266Incorrect Privilege AssignmentA product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
• CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.