CyberSecBulletin

Lynxtechnology vulnerabilities

We track 2 vulnerabilities in Lynxtechnology products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 19, 2025.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Lynxtechnology vulnerabilities

  • 8.1 High severity

    Twonky Server: Use of Hard-coded Cryptographic Key

    CVE-2025-13316LynxtechnologyEPSS 2.78%

    Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and

  • 9.8 Critical severity

    Twonky Server: Unprotected Alternate Channel

    CVE-2025-13315LynxtechnologyEPSS 31.2%

    Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.