Twonky Server Critical Vulnerabilities Let Attackers Bypass Authentication

Cyberpress • November 20, 2025

Share: View original

Security researchers at Rapid7 discovered that an attacker can leak encrypted admin passwords through an unprotected API endpoint.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Twonky Server Vulnerabilities Allow Bypass of Authentication Recent vulnerabilities in Twonky Server have been identified, enabling attackers to bypass authentication mechanisms. This flaw affects users of the Twonky Server software, potentially exposing sensitive data and systems to unauthorized access. Security experts recommend immediate action to mitigate risks associated with these vulnerabilities. 3 sources 47

Extracted Entities

Attack Types (1)

Platforms (1)