CVE-2026-10254

MEDIUM

SourceCodester Pet Grooming Management Software admin file information disclosure

Title source: cna
STIX 2.1

Description

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-367532 | SourceCodester Pet Grooming Management Software admin file information disclosure
https://vuldb.com/vuln/367532
Signature, Permissions Required signature permissions-required
VDB-367532 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/367532/cti
Third Party Advisory third-party-advisory
CVE-2026-10254 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10254
Third Party Advisory third-party-advisory
Submit #824147 | SourceCodester Pet Grooming Management Software v1.0 Directory traversal
https://vuldb.com/submit/824147
Exploit exploit issue-tracking
https://github.com/MICHEY-Ben/cve/issues/2

Scores

CVSS v3 5.3
EPSS 0.0033
EPSS Percentile 24.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-200 CWE-538
Status published
Products (1)
SourceCodester/Pet Grooming Management Software 1.0
Published Jun 01, 2026
Tracked Since Jun 01, 2026