HIGH 8.1 NVD

CVE-2025-9210

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate priv

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0023.md
https://www.otalio.com/solutions/

Published: 2026-08-18 · Source: NVD · Feed updated: 2026-08-18

This high severity vulnerability with a CVSS score of 8.1 was published on 2026-08-18 via NVD.

vulnfeed aggregates 11052 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.