Vulnerability · Published Jul 28, 2026 · Assigned by blackberry
CVE-2026-18085Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
Medium 5.9
In plain English
A medium-severity injection in UEM from BlackBerry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 4.0)5.9Medium
Exploit odds (30 days)0.3%top 81.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BlackBerry | UEM | 12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier |
Weakness: CWE-74 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L