Do Son A Critical Auth Bypass (CVSS 9.3) in Emby Server's API allows unauthenticated admin takeover. The team deployed a "quick fix" via automatic plugin update for rapid protection. Upgrade to v4.9.1.90 immediately.
Media Server
Critical alert: Twonky Server suffers unpatched flaws (CVE-2025-13315/16) allowing full takeover. Vendor has no fix; isolate your server immediately.