Beveiligingsadvies

CVE-2026-5781

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 11:44:26

Laatst bijgewerkt 2026-04-28 13:40:55

Toegewezen door INCIBE

CVSS-score 8.5

Status PUBLISHED

Beschrijving

An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending an HTTP request with a manipulated 'identifier' field. Successful exploitation of this vulnerability could allow an authenticated user to obtain administrator privileges. It is not possible to escalate privileges through the graphical user interface.

← Alle CVE's bekijken Bekijk op cve.org ↗