CVE-2026-3737 - Vulnerability Analysis

Overview

SourceCodester Pet Grooming Management Software 1.0 contains a broken access control caused by improper authorization in add_user.php User Creation Handler, letting remote attackers bypass authorization, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can bypass authorization to perform unauthorized actions, potentially compromising user management.

Mitigation

Update to the latest version or apply vendor patches addressing authorization checks.

References

• https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_1.md
• https://vuldb.com/?ctiid.349715
• https://vuldb.com/?id.349715
• https://vuldb.com/?submit.767320
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner