Lynxtechnology vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lynxtechnology products: 2 record(s), with severity, exploitation and fixes.

Twonky Server 2

Exploited only (KEV) →

CVE-2025-13316 High · 8.1 Public exploit CWE-321 Nov 19, 2025

Hard-coded encryption keys in Twonky Server

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.

CVE-2025-13315 Critical · 9.8 Public exploit CWE-420 Nov 19, 2025

Unauthenticated log access in Twonky Server

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.