MphRx Minerva CVE-2026-5781

Organizations running MphRx Minerva V3.6.0 should immediately consult the INCIBE-CERT advisory at https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-mphrxs-minerva for vendor-provided patches and upgrade guidance. No vendor-released patch version is independently confirmed from available data at time of analysis. As interim mitigation, restrict user modification privileges to the minimum necessary personnel and implement monitoring for unexpected privilege changes or direct API calls to '/minerva/moUser/update' outside normal business processes. Web application firewall rules can detect and block requests to this endpoint containing 'identifier' field modifications from users whose session tokens do not correspond to superuser accounts, though this requires custom rule development. Network segmentation should ensure the Minerva administrative interface is accessible only from trusted management networks, not general user VLANs. Audit existing user accounts for evidence of unauthorized privilege escalation by reviewing user modification logs and comparing current privilege assignments against authorized baselines. These compensating controls reduce but do not eliminate risk, as authenticated insiders with legitimate user management access can still exploit the flaw.