https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67840.htmlhttps://patchthecve.com/cve/CVE-2025-67840.htmlWed, 17 Jun 2026 09:58:09 +0000HIGH 7.2: Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.depot web application API endpoints (including Scheduler and Actions pages). The appliance directly concatenates user-controlled paramethttps://patchthecve.com/cve/CVE-2025-63912.htmlhttps://patchthecve.com/cve/CVE-2025-63912.htmlWed, 17 Jun 2026 09:53:39 +0000HIGH 7.5: Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the encyption and expose credentials.https://patchthecve.com/cve/CVE-2025-63911.htmlhttps://patchthecve.com/cve/CVE-2025-63911.htmlWed, 17 Jun 2026 09:53:39 +0000HIGH 7.2: Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.https://patchthecve.com/cve/CVE-2025-63910.htmlhttps://patchthecve.com/cve/CVE-2025-63910.htmlWed, 17 Jun 2026 09:53:39 +0000HIGH 7.2: An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file.https://patchthecve.com/cve/CVE-2025-63909.htmlhttps://patchthecve.com/cve/CVE-2025-63909.htmlWed, 17 Jun 2026 09:53:39 +0000HIGH 7.2: Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers to escalate privileges to root and read and write arbitrary files.