CVE-2026-18085

MediumCVSS 6.9

Published: 28/07/2026(UTC)Updated: 23/10/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

The BlackBerry UEM Management Console in version 12.23.0 QF8 and earlier has improper input validation, allowing arbitrary file download and potential denial of service (DoS).

Risk Assessment

An attacker can download arbitrary files from the server, including sensitive data, or cause system overload leading to denial of service.

Recommendation

Update BlackBerry UEM to a version later than 12.23.0 QF8 that includes the fix.

Other vulnerabilities in BlackBerry UEM

CVE-2026-18084Medium
An XSS vulnerability in the BlackBerry UEM Management Console. Improper input neutralization allows an attacker to inject malicious scripts.

Original NVD description (English source)

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS