Twonky Server vulnerabilities

2 known vulnerabilities in Twonky Server from Lynxtechnology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Twonky Server: Use of Hard-coded Cryptographic Key

  CVE-2025-13316Nov 19, 2025LynxtechnologyEPSS 2.78%

  Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and

• 9.8 Critical severity

  Twonky Server: Unprotected Alternate Channel

  CVE-2025-13315Nov 19, 2025LynxtechnologyEPSS 31.2%

  Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.