Read the docs

MphRx

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

MphRx records in CISA KEV

No MphRx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Minerva 3 records MEDIUM

Records

3 records

TI-2026-05061 CVE-2026-5779 · GHSA-rw4g-vpc3-98p2

Multiple vulnerabilities in MphRx's Minerva

Priority MEDIUM 40

An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00252 Published 2026-04-28 No fix listed CWE-284
TI-2026-05063 CVE-2026-5781 · GHSA-9wqr-9q37-v626

Multiple vulnerabilities in MphRx's Minerva

Priority LOW 36

An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending…

CVSS 4.0HIGH 8.5 Network Low privileges No interaction EPSS 0.00232 Published 2026-04-28 No fix listed CWE-285
TI-2026-05062 CVE-2026-5780 · GHSA-4c76-7f7j-hcc4

Multiple vulnerabilities in MphRx's Minerva

Priority LOW 36

An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'.

CVSS 4.0HIGH 8.5 Network Low privileges No interaction EPSS 0.00201 Published 2026-04-28 No fix listed CWE-284
Open these records in search →