https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65832.htmlhttps://patchthecve.com/cve/CVE-2025-65832.htmlWed, 17 Jun 2026 09:55:59 +0000MEDIUM 4.6: The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi credentials sent during the pairing process, JWTs used for authentication, and other sensitive details can be retrieved. As https://patchthecve.com/cve/CVE-2025-65831.htmlhttps://patchthecve.com/cve/CVE-2025-65831.htmlWed, 17 Jun 2026 09:55:59 +0000HIGH 7.5: The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in https://patchthecve.com/cve/CVE-2025-65830.htmlhttps://patchthecve.com/cve/CVE-2025-65830.htmlWed, 17 Jun 2026 09:55:59 +0000CRITICAL 9.1: Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if the https://patchthecve.com/cve/CVE-2025-65827.htmlhttps://patchthecve.com/cve/CVE-2025-65827.htmlWed, 17 Jun 2026 09:55:58 +0000CRITICAL 9.1: The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise of thttps://patchthecve.com/cve/CVE-2025-65826.htmlhttps://patchthecve.com/cve/CVE-2025-65826.htmlWed, 17 Jun 2026 09:55:58 +0000CRITICAL 9.8: The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located ihttps://patchthecve.com/cve/CVE-2025-65820.htmlhttps://patchthecve.com/cve/CVE-2025-65820.htmlWed, 17 Jun 2026 09:55:57 +0000CRITICAL 9.8: An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mobile application which opens a hidden page. This page, which is not available through the normal flows of the application, contains several devices which can be added to your accoun