CVE-2026-18085
Full vulnerability record from the local CVENow database.
Description
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Severity
MEDIUM
CVSS score
5.9
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2026-07-28 17:16:38.150000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-18085",
"sourceIdentifier": "[email protected]",
"published": "2026-07-28T17:16:38.150",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service."
},
{
"lang": "es",
"value": "Una validación de entrada incorrecta en la Consola de Gestión de BlackBerry UEM 12.23.0 QF8 y versiones anteriores permite la descarga arbitraria de archivos y una posible denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "BlackBerry",
"product": "UEM",
"defaultStatus": "affected",
"modules": [
"Management Console"
],
"versions": [
{
"version": "12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:H",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 4.7
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-28T16:53:31.439139Z",
"id": "CVE-2026-18085",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-74"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0828177A-19A0-40F3-A954-6DF6A2AB2D4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix1:*:*:*:*:*:*",
"matchCriteriaId": "0DAAB615-AB15-428B-B7AB-BA3FC40AAC0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix2:*:*:*:*:*:*",
"matchCriteriaId": "A7DAE980-128C-43E0-9419-ADA98052DCAD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix3:*:*:*:*:*:*",
"matchCriteriaId": "68019BC8-2EC0-418E-A36D-DA9986E9F9AC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix4:*:*:*:*:*:*",
"matchCriteriaId": "08B40088-A7B5-4FF2-BB55-66B549AA0256"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix5:*:*:*:*:*:*",
"matchCriteriaId": "A60E9BDB-2473-499C-88F5-4D77BBA8D389"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix6:*:*:*:*:*:*",
"matchCriteriaId": "68C20984-33EB-444E-9EC3-C8FD5704B538"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix7:*:*:*:*:*:*",
"matchCriteriaId": "B7F79521-495C-4764-8525-80BC0D2F022C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix8:*:*:*:*:*:*",
"matchCriteriaId": "CB0A040F-5129-4F13-B570-5D1A5867F8CD"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:-:*:*:*:*:*:*",
"matchCriteriaId": "DE316006-38A5-4F46-B664-60509A1B4E76"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix1:*:*:*:*:*:*",
"matchCriteriaId": "7F5E5F2F-086D-4261-AD86-694E9D309950"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix2:*:*:*:*:*:*",
"matchCriteriaId": "687E2E4B-2841-43A6-BDE7-8ADD2E12E0D8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix3:*:*:*:*:*:*",
"matchCriteriaId": "42AD8DCE-F74A-410B-B15F-B52878472E5B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix4:*:*:*:*:*:*",
"matchCriteriaId": "0AF32244-BA24-4BE7-9685-72050706E579"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix5:*:*:*:*:*:*",
"matchCriteriaId": "65450C05-0C20-4DF1-BF69-655CA2370D99"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix6:*:*:*:*:*:*",
"matchCriteriaId": "1B88E9F9-9267-4D8E-8CB3-FE88F950BF22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix7:*:*:*:*:*:*",
"matchCriteriaId": "6499E219-07C8-4003-97E5-08CCEACF6377"
}
]
}
]
}
],
"references": [
{
"url": "https://support.blackberry.com/pkb/s/article/141208",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}