CVE-2026-18085
Received Received - Intake

Improper Input Validation in BlackBerry UEM Management Console

Publication date: 2026-07-28

Last updated on: 2026-07-28

Assigner: BlackBerry

Description
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-28
Last Modified
2026-07-28
Generated
2026-07-28
AI Q&A
2026-07-28
EPSS Evaluated
N/A
NVD
CVE-2026-18085
EUVD
EUVD-2026-49897

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
blackberry uem to 12.23.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Input Validation flaw in the BlackBerry UEM Management Console affecting versions 12.23.0 QF8 and earlier. It allows attackers to perform Arbitrary File Download and potentially cause a Denial of Service.

Impact Analysis

An attacker could exploit this to download arbitrary files from the system or disrupt services by causing a Denial of Service, potentially leading to data exposure or system unavailability.

Compliance Impact

This vulnerability could lead to unauthorized data access or service disruption, which may violate GDPR's data protection requirements or HIPAA's integrity and availability standards, potentially resulting in compliance violations.

Mitigation Strategies

Update BlackBerry UEM to a version later than 12.23.0 QF8 to address the improper input validation issue. Monitor official BlackBerry advisories for patches and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18085. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart