TI-2025-12178 CVE-2025-13315 · GHSA-x96r-v3vc-578h
Unauthenticated log access in Twonky Server
Priority HIGH 72
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw.
Lynxtechnology
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Lynxtechnology records in CISA KEVNo Lynxtechnology vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Twonky Server · all components
TI-2018-05193 CVE-2018-7171 · GHSA-w6p6-8rg5-jg22
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote…
Priority MEDIUM 55
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..
TI-2025-12179 CVE-2025-13316 · GHSA-6wjv-8p85-pcxm
Hard-coded encryption keys in Twonky Server
Priority MEDIUM 41
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys.
TI-2018-05220 CVE-2018-7203 · GHSA-34j4-g3h6-ww5q
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows…
Priority LOW 32
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/set_all.
TI-2018-06669 CVE-2018-9182 · GHSA-7rhj-8m83-26xf
Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.
Priority LOW 30
Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.
TI-2018-06668 CVE-2018-9177 · GHSA-5r9h-jr43-76fj
Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.
Priority LOW 28
Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.