CVE-2026-18084 | CyberRota

CyberRota Analysis

AI-Generated

The BlackBerry UEM Management Console is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation, potentially allowing attackers to inject malicious scripts. Organizations using UEM version 12.23.0 QF8 or earlier should prioritize remediation to mitigate the risk of unauthorized access and data compromise through this vulnerability.

CVE

CVE-2026-18084

Severity

MEDIUM

CVSS

6.1

EPSS

0.15%

Original NVD Description

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-18085 MEDIUM CVE-2025-12766 MEDIUM CVE-2025-2474 CRITICAL CVE-2025-3945 HIGH CVE-2025-3944 HIGH CVE-2025-3943 MEDIUM