Credential-Leak

Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315) new EPSS 33%CVE-2025-13315networkCRITICAL 9.8Unpatched2026-07-06Pterodactyl Panel Unauthenticated Path Traversal via locale.json Leaking Database Credentials (CVE-2025-49132) new EPSS 53%CVE-2025-49132webCRITICAL 10Patched2026-07-06ZTE ZXHN H298A / H108N Router Unauthenticated Credential Disclosure (CVE-2026-34474) new EPSS 25%CVE-2026-34474networkHIGHUnverified2026-07-05ZTE ZXHN H188A Unauthenticated Wizard Handler Credential Disclosure / Auth Bypass (CVE-2026-34472) newCVE-2026-34472networkCRITICALUnverified2026-07-05