CVE-2026-75014 is a SQL injection vulnerability affecting SourceCodester Pet Grooming Management Software version 1.0. The issue exists in the /admin/get_barcode_data.php script where the 'barcode' parameter is improperly sanitized, allowing an attacker to inject SQL commands. This vulnerability can be exploited remotely without any privileges or user interaction. Exploit code has been publicly released, increasing the risk of exploitation. No official patch or vendor advisory is currently available to address this issue.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, data modification, or other database-related impacts. The vulnerability is remotely exploitable without authentication, increasing its risk profile. However, the CVSS score of 6.9 indicates a medium severity impact, with limited scope and impact metrics.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the 'barcode' parameter. Restricting access to the /admin/get_barcode_data.php endpoint to trusted IPs and monitoring for suspicious activity may also help mitigate risk.