CVE-2025-63910

7.2 highEPSS 0.4%

High (7.2) in cohesity tranzman. EPSS 0.4% chance of exploitation in the next 30 days.

An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-345
Published: 2026-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cohesity:tranzman

References

https://docs.stoneram.com/index.php/Tranzman
https://gist.github.com/GregDurys/74c36c36bef81293a42022758f2736a9
https://github.com/GregDurys/Cohesity-TranZman-CVEs

Check your stack JSON