PT-2026-65531 · Blackberry · Uem

Christian Becker · CVE-2026-18085 · Published 2026-07-28 · Updated 2026-07-28

NVD

CVSS v4.0

5.9

Medium

Base vector

AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2026-18085

Affected Products

Uem

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-18085 · Security Note
• https://support.blackberry.com/pkb/s/article/141208 · Note