Skip to content

Product

MphRx Minerva vulnerabilities

3 published CVES affecting MphRx Minerva, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest MphRx Minerva CVEs

Newest publication first

  1. CVE-2026-5781 Multiple vulnerabilities in MphRx's Minerva

    Published
    HighCVSS 8.5 EPSS 0.23%

    An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending an HTTP request with a manipulated 'identifier' field. Succ...

  2. CVE-2026-5780 Multiple vulnerabilities in MphRx's Minerva

    Published
    HighCVSS 8.5 EPSS 0.20%

    An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authenticated user can access the data of other registered users simply by modifying the I...

  3. CVE-2026-5779 Multiple vulnerabilities in MphRx's Minerva

    Published
    CriticalCVSS 9.4 EPSS 0.25%

    An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the information of other registered users. Successful exploitation of this vulnerability...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.