Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTsReferenceshttps://www.otalio.com/solutions/https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0023.md
