Twonky Server
Approved changes feed: RSS · Atom
cpe:2.3:a:lynxtechnology:twonky_server:8.5.2:*:*:*:*:*:*:*part: a version: 8.5.2 update: *
| Vendor | Lynxtechnology (cc0e3e16-fdc0-544d-9d56-76c235685d81) |
|---|---|
| Product | Twonky Server (97ece725-4e71-51ee-9ea8-644878ee8815) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/dtjs48jkt/twonkyserver |
purl2cpe | 2026-06-01 10:15:15.951964 |
pkg:github/h2ck/twonkyserver |
purl2cpe | 2026-06-01 10:15:15.951966 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13316 |
vulnerable | 2026-06-08 07:04:31.993076 |
Hard-coded encryption keys in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.
Published: 2025-11-19T17:53:42.934Z
Updated: 2025-11-19T18:19:43.388Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13315 |
vulnerable | 2026-06-08 07:04:31.992383 |
Unauthenticated log access in Twonky Server
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.
Published: 2025-11-19T17:41:36.996Z
Updated: 2025-11-19T18:20:50.718Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.