CVE-2025-63910: High severity Cohesity TranZman Migration Appliance vulnerability
Published Mar 3, 2026
·Updated
An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file.
Affected Software
2 affected components
Cohesity TranZman Migration Appliance
Cohesity TranZman=4.0-build14614
Event History
Mar 3, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63910?
CVE-2025-63910 is considered a critical vulnerability due to the ability of authenticated users to execute arbitrary code.
2
What systems are affected by CVE-2025-63910?
CVE-2025-63910 specifically affects the Cohesity TranZman Migration Appliance version 4.0 Build 14614.
3
How do I fix CVE-2025-63910?
To mitigate CVE-2025-63910, ensure that you do not allow Administrator users to upload unverified or crafted patch files.
4
What type of vulnerability is CVE-2025-63910?
CVE-2025-63910 is an authenticated arbitrary file upload vulnerability.
5
Who can exploit CVE-2025-63910?
Only users with Administrator privileges can exploit CVE-2025-63910 to execute arbitrary code.