CVE-2026-5779 is an insecure direct object reference (IDOR) vulnerability in MphRx's Minerva version 3.6.0. It affects the '/minerva/user/updateUserProfile' endpoint, allowing an authenticated user to modify other users' profile information, including email addresses. This can be exploited to request password resets for those accounts, potentially leading to full account takeover.