CVE-2026-18084
Received Received - Intake

Reflected Cross-Site Scripting in BlackBerry UEM Management Console

Publication date: 2026-07-28

Last updated on: 2026-07-28

Assigner: BlackBerry

Description
Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-28
Last Modified
2026-07-28
Generated
2026-07-28
AI Q&A
2026-07-28
EPSS Evaluated
N/A
NVD
CVE-2026-18084
EUVD
EUVD-2026-49898

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
blackberry uem to 12.23.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Neutralization of Input During Web Page Generation issue in BlackBerry UEM Management Console. It allows Cross-Site Scripting (XSS) attacks due to insufficient input sanitization.

Detection Guidance

This vulnerability is related to Cross-Site Scripting (XSS) in BlackBerry UEM Management Console. Detection typically involves inspecting web application inputs for improper neutralization of user-supplied data. Check for unusual script execution or input fields in the UEM console. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to inject malicious scripts into web pages viewed by users. This may lead to theft of session cookies, credentials, or other sensitive data.

Compliance Impact

The vulnerability allows Cross-Site Scripting (XSS) in the BlackBerry UEM Management Console, which could enable attackers to inject malicious scripts into web pages. This may lead to unauthorized data access or manipulation, potentially violating GDPR (data protection) and HIPAA (healthcare data privacy) compliance by exposing sensitive user information.

Mitigation Strategies

Update BlackBerry UEM to version 12.23.0 QF8 or later to address the vulnerability. Monitor BlackBerry's official advisories for patches and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18084. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart