CVE-2025-9210

Summary

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

Affected Software

Weaknesses

• CWE-347: CWE-347: Improper Verification of Cryptographic Signature

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.otalio.com/solutions/
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0023.md

• ←Previous
• Next→