CVE-2018-7171: Lynxtechnology Twonky Server

High severity, CVSS 7.5. EPSS: 27.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.

Affected products

• Lynxtechnology Twonky Server: from 7.0.11, up to and including 8.5

Published 2018-03-30. Last modified 2026-06-17.