An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privil…

CVE-2025-63910 is an authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614. The vulnerability allows attackers with Administrator privileges to execute arbitrary code by uploading a crafted patch file. This represents a high-severity security flaw that could lead to complete system compromise when exploited by privileged users. The vulnerability affects the file upload mechanism in the migration appliance, potentially allowing malicious code execution through specially crafted patch files.