https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-27503.htmlhttps://patchthecve.com/cve/CVE-2021-27503.htmlWed, 17 Jun 2026 03:44:59 +0000MEDIUM 4.8: Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on harhttps://patchthecve.com/cve/CVE-2021-27499.htmlhttps://patchthecve.com/cve/CVE-2021-27499.htmlWed, 17 Jun 2026 03:44:59 +0000MEDIUM 5.9: Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-https://patchthecve.com/cve/CVE-2021-27495.htmlhttps://patchthecve.com/cve/CVE-2021-27495.htmlWed, 17 Jun 2026 03:44:58 +0000HIGH 7.1: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint.https://patchthecve.com/cve/CVE-2021-27491.htmlhttps://patchthecve.com/cve/CVE-2021-27491.htmlWed, 17 Jun 2026 03:44:58 +0000HIGH 7.5: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses password hashes during the registration process.