Unrated severityNVD Advisory· Published Jul 28, 2026· Updated Jul 31, 2026

Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

CVE-2026-18084

Description

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS).

This issue affects UEM: 12.23.0 QF8 or earlier.

Affected products

Blackberry/UEMllm-fuzzy
Range: <=12.23.0 QF8
Blackberry/UEM Management Consolellm-fuzzy
Range: <=12.23.0 QF8

Patches

Vulnerability mechanics

References

support.blackberry.com/pkb/s/article/141208mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000