Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: MphRx Component: Minerva Clear all filters
TI-2026-05063 CVE-2026-5781 · GHSA-9wqr-9q37-v626

Multiple vulnerabilities in MphRx's Minerva

Priority LOW 36

An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending…

CVSS 4.0HIGH 8.5 Network Low privileges No interaction EPSS 0.00232 Published 2026-04-28 No fix listed CWE-285
TI-2026-05062 CVE-2026-5780 · GHSA-4c76-7f7j-hcc4

Multiple vulnerabilities in MphRx's Minerva

Priority LOW 36

An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'.

CVSS 4.0HIGH 8.5 Network Low privileges No interaction EPSS 0.00201 Published 2026-04-28 No fix listed CWE-284
TI-2026-05061 CVE-2026-5779 · GHSA-rw4g-vpc3-98p2

Multiple vulnerabilities in MphRx's Minerva

Priority MEDIUM 40

An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00252 Published 2026-04-28 No fix listed CWE-284