https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-5781.htmlhttps://patchthecve.com/cve/CVE-2026-5781.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.8: An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending an HTTP request with a manipulated 'identifier' field. Successful exploitation https://patchthecve.com/cve/CVE-2026-5780.htmlhttps://patchthecve.com/cve/CVE-2026-5780.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.1: An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authenticated user can access the data of other registered users simply by modifying the ID. This allows an athttps://patchthecve.com/cve/CVE-2026-5779.htmlhttps://patchthecve.com/cve/CVE-2026-5779.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.8: An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the information of other registered users. Successful exploitation of this vulnerability allows an authentic