CVE-2026-18084

MediumCVSS 6.1

Published: 28/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

An XSS vulnerability in the BlackBerry UEM Management Console. Improper input neutralization allows an attacker to inject malicious scripts.

Risk Assessment

An attacker can steal administrator sessions or redirect users to malicious sites.

Recommendation

Update BlackBerry UEM to a version later than 12.23.0 QF8.

Other vulnerabilities in BlackBerry UEM

CVE-2026-18085Medium
The BlackBerry UEM Management Console in version 12.23.0 QF8 and earlier has improper input validation, allowing arbitrary file download and potential denial of service (DoS).

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS