CVE-2026-18085: Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
Published Jul 28, 2026
·Updated
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Affected Software
18 affected components
BlackBerry BlackBerry UEM Management Console<=12.23.0 QF8
BlackBerry Unified Endpoint Manager=12.23.0
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix1
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix2
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix3
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix4
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix5
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix6
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix7
BlackBerry Unified Endpoint Manager=12.23.0-quick_fix8
BlackBerry Unified Endpoint Manager=12.22.1
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix1
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix2
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix3
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix4
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix5
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix6
BlackBerry Unified Endpoint Manager=12.22.1-quick_fix7
Event History
Jul 28, 2026
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
DescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-18085?
CVE-2026-18085 has a risk score of 47, indicating a moderate severity level.
2
How do I fix CVE-2026-18085?
To mitigate CVE-2026-18085, ensure you update to BlackBerry UEM version 12.23.1 or later.
3
What are the potential impacts of CVE-2026-18085?
CVE-2026-18085 can lead to arbitrary file downloads and potential denial of service.
4
Which versions of BlackBerry UEM are affected by CVE-2026-18085?
CVE-2026-18085 affects BlackBerry UEM 12.23.0 QF8 and earlier versions.
5
What is the cause of CVE-2026-18085?
CVE-2026-18085 is caused by improper input validation in the BlackBerry UEM Management Console.