CVE-2026-1702HIGH 8.8EPSS p27.5%

CVE-2026-1702CVE-2026-1702

Description

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument group_id results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.36% probability of exploitation · percentile 27.5% · 2026-06-19T12:03:05Z
Published2026-01-30
Last modified2026-04-29

Underlying weaknesses· 2

CWE-266CWE-285

References

  1. https://github.com/Asim-QAZi/Improper-Access-Control---in-Pet-Grooming-Management-Software
  2. https://vuldb.com/?ctiid.343492
  3. https://vuldb.com/?id.343492
  4. https://vuldb.com/?submit.742226
  5. https://www.sourcecodester.com/

2

TypeTargetConfidenceTier
WeaknessIncorrect Privilege Assignmentcwe-2660%live
WeaknessImproper Authorizationcwe-2850%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-10598
CVE
CVE-2026-10254
CVE
CVE-2025-10396
CVE
CVE-2025-10427
CVE
CVE-2025-10828
CVE
CVE-2025-10431
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.