Unrated severityNVD Advisory· Published Nov 19, 2025· Updated Nov 19, 2025

Unauthenticated log access in Twonky Server

CVE-2025-13315

Description

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lynxtechnology/Twonky Serverv5
Range: 8.5.2

Patches

Vulnerability mechanics

References

www.rapid7.com/blog/post/cve-2025-13315-cve-2025-13316-critical-twonky-server-authentication-bypass-not-fixed/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.026
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000