PT-2026-65530 · Blackberry · Uem

Christian Becker · CVE-2026-18084 · Published 2026-07-28 · Updated 2026-07-28

Mitre

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS).

This issue affects UEM: 12.23.0 QF8 or earlier.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-18084

Affected Products

Uem

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-18084 · Security Note
• https://support.blackberry.com/pkb/s/article/141208 · Note