PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-63912 Cohesity CVE debrief

CVE-2025-63912 is a High-severity weakness in Cohesity TranZman Migration Appliance Release 4.0 Build 14614. According to the NVD record, the product uses a weak cryptography algorithm for data encryption, which could allow an attacker to reverse the protection and expose credentials. NVD rates the issue 7.5/10 (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating network-reachable impact with high confidentiality risk.

Vendor
Cohesity
Product
CVE-2025-63912
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-03
Original CVE updated
2026-05-10
Advisory published
2026-03-03
Advisory updated
2026-05-10

Who should care

Administrators and security teams responsible for Cohesity TranZman Migration Appliance deployments, especially any environment running Release 4.0 Build 14614 or systems that depend on it for migration workflows. Credential exposure risk also makes IAM and incident response teams relevant stakeholders.

Technical summary

The NVD entry maps the issue to CWE-327 (Use of a Broken or Risky Cryptographic Algorithm). The vulnerability description states that the appliance uses weak cryptography for data encryption, making reversal of the encryption trivial for an attacker and exposing credentials. The vulnerable CPE in the record is cohesity:tranzman:4.0:build14614. No exploit details beyond the advisory references were provided in the supplied corpus.

Defensive priority

High. Treat as a credential-exposure issue with potential downstream access impact. Prioritize validation of whether the affected build is deployed, then reduce exposure by removing or isolating the vulnerable instance and rotating any credentials that may have been protected by the weak encryption.

Recommended defensive actions

  • Identify whether Cohesity TranZman Migration Appliance Release 4.0 Build 14614 is present in your environment.
  • If affected, minimize exposure by isolating the appliance and restricting network access until remediation is confirmed.
  • Review any credentials or sensitive data stored or handled by the appliance and rotate secrets that may have been exposed.
  • Check the official CVE/NVD entries and the linked third-party advisory resources for remediation guidance and any vendor updates.
  • Monitor authentication logs and dependent systems for signs that exposed credentials were used improperly.

Evidence notes

This debrief is based on the supplied CVE record and NVD metadata only. Supported facts include the published and modified dates, the affected CPE (cohesity:tranzman:4.0:build14614), the CVSS vector and score, and the CWE-327 classification. The corpus also includes two MITRE-sourced third-party links, one tagged Exploit and Third Party Advisory, but their contents were not independently summarized here. No vendor patch status or exploit mechanics were assumed beyond the provided description.

Official resources

Published in the CVE record on 2026-03-03 and modified on 2026-05-10, per the supplied timeline. This summary uses the published date as the issue date context and does not infer any earlier disclosure timing.