Skip to content
OpenAdvisories

Vendor

Lynxtechnology

2 known vulnerabilities.

Products

Twonky Server 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2025-13316 Public exploit

    Hard-coded encryption keys in Twonky Server

    Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and…

    Lynxtechnology Twonky Server
  • Critical 9.3
    CVE-2025-13315 Public exploit EPSS 31%

    Unauthenticated log access in Twonky Server

    Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.

    Lynxtechnology Twonky Server