CVE-2025-9210

—

CVSS 3.1

8.1 high

EPSS

<1%p5

Published

Aug 18, 2026 (28d ago)

Modified

Aug 31, 2026

Description

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

Weakness: CWE-347
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.