CVE-2025-13315
Vulnerability in Lynxtechnology Twonky Server
CVSS score
9.8
EPSS probability
%32.5
Risk score
3.2
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
Makefile Go / Python
NVD reference
https://www.rapid7.com/blog/post/cve-2025-13315-cve-2025-13316-critical-twonky-server-authentication-bypass-not-fixed/
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2020-0796 Actively exploitedMemory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems
Patch verified Public Exploits:14EPSS %100
9.8
CVE-2025-53770 Actively exploitedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Patch verified Public Exploits:12EPSS %100
9.8
CVE-2025-59287 Actively exploitedWindows Server Update Service (WSUS) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2021-38647 Actively exploitedOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2022-30333 Actively exploitedPath traversal in N/a
Patch verifiedEPSS %99
9.8
CVE-2024-21413 Actively exploitedMicrosoft Outlook Remote Code Execution Vulnerability
Patch verified Public Exploits:7EPSS %95
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-13315"