CVE-2025-63909: High severity Cohesity TranZman Migration Appliance vulnerability

Published Mar 3, 2026

Updated

Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers to escalate privileges to root and read and write arbitrary files.

Affected Software

2 affected components

Cohesity TranZman Migration Appliance

Cohesity TranZman=4.0-build14614

Event History

Mar 3, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·06:16 PM

DescriptionSeverityWeaknessAffected Software

Oct 24, 58143

Event

via NVD·01:57 PM

Frequently Asked Questions

What is the severity of CVE-2025-63909?

CVE-2025-63909 is a critical vulnerability that allows privilege escalation to root level.

How do I fix CVE-2025-63909?

To fix CVE-2025-63909, update Cohesity TranZman Migration Appliance to the latest version provided by the vendor.

What are the potential impacts of CVE-2025-63909?

Exploitation of CVE-2025-63909 allows attackers to read and write arbitrary files, compromising system integrity and confidentiality.

Which systems are affected by CVE-2025-63909?

CVE-2025-63909 affects Cohesity TranZman Migration Appliance version 4.0 Build 14614.

What is the nature of the vulnerability in CVE-2025-63909?

CVE-2025-63909 involves incorrect access control in the TapeDumper component of the Cohesity TranZman Migration Appliance.