A vulnerability, which was classified as critical, has been found in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument group_id results in improper authorization.

This vulnerability is identified as CVE-2026-1702. The attack can be initiated remotely. Additionally, an exploit exists.