High severity8.1NVD Advisory· Published Aug 18, 2026

CVE-2025-9210

Description

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Otalio/Ship Property Management Systemllm-create
Range: <2.22.0

Patches

Vulnerability mechanics

References

github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0023.mdnvd
www.otalio.com/solutions/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000