PT-2026-22770 · Cohesity · Cohesity Tranzman Migration Appliance

Publicado 2026-03-03 · Atualizado 2026-03-05 · CVE-2025-63911

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cohesity TranZman Migration Appliance version 4.0 Build 14614

Description The Cohesity TranZman Migration Appliance contains an authenticated command injection issue. An attacker with valid credentials can inject commands. The vulnerable component allows for the execution of arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-63911

Produtos afetados

Cohesity Tranzman Migration Appliance

Referências · 7

• 🔥 https://gist.github.com/GregDurys/8b7a3022c04b6cee8c1e1af04f5671b2 · Exploit
• 🔥 https://github.com/GregDurys/Cohesity-TranZman-CVEs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63911 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-63911 · Aviso do Fabricante
• https://t.me/cveNotify/154238 · Publicação no Telegram
• https://t.me/CVEtracker/46232 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2028931909753946467 · Publicação no Twitter