CVE-2026-5780 is an insecure direct object reference (IDOR) vulnerability in MphRx's Minerva version 3.6.0. It affects the endpoint '/minerva/moUser/show/' and allows an authenticated user to access other users' data by modifying the ID parameter. This vulnerability can lead to unauthorized disclosure of user information and exposure of the user list.