CVE-2025-63910

CVSS 7.2 HIGHEPSS 0.4%CWE-345

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Mar 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file.

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.stoneram.com/index.php/Tranzman https://gist.github.com/GregDurys/74c36c36bef81293a42022758f2736a9 https://github.com/GregDurys/Cohesity-TranZman-CVEs