CVE-2025-15235

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Jan 5, 2026

CISA due date

—

The record

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files.

Affected packages

Ecosystem	Package	Introduced	Fixed