https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-18979.htmlhttps://patchthecve.com/cve/CVE-2018-18979.htmlWed, 17 Jun 2026 01:48:12 +0000HIGH 7.4: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded initialization vector. Extraction of the initialization vector is necessary for deciphering communications between this application and the backend server. This, in combinatihttps://patchthecve.com/cve/CVE-2018-18978.htmlhttps://patchthecve.com/cve/CVE-2018-18978.htmlWed, 17 Jun 2026 01:48:12 +0000HIGH 7.4: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphering communications between this application and the backend server. This, in combination with retriehttps://patchthecve.com/cve/CVE-2018-18977.htmlhttps://patchthecve.com/cve/CVE-2018-18977.htmlWed, 17 Jun 2026 01:48:12 +0000HIGH 7.5: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reverse engineer the codebase to extract sensitive data that contributes to the disclosure of medical information of patients utilizing the Ascensia platform. This occurs because of wehttps://patchthecve.com/cve/CVE-2018-18976.htmlhttps://patchthecve.com/cve/CVE-2018-18976.htmlWed, 17 Jun 2026 01:48:12 +0000MEDIUM 5.3: An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can https://patchthecve.com/cve/CVE-2018-18975.htmlhttps://patchthecve.com/cve/CVE-2018-18975.htmlWed, 17 Jun 2026 01:48:12 +0000HIGH 7.5: An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate-pinning implementation, leading to disclosure of medical information.