CVE-2026-18084

MEDIUM 6.1CVE-2026-18084 · Published 28/07/2026 · updated 24/10/2026

In short

CVE-2026-18084 is a MEDIUM (CVSS 6.1) vulnerability affecting unified endpoint manager (blackberry).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified endpoint manager blackberry	`= 12.22.1= 12.23.0`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

References

support.blackberry.com/pkb/s/article/141208 · Vendor Advisory

More vulnerabilities in unified endpoint manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified endpoint manager

blackberry

= 12.22.1= 12.23.0

No fix yet

More vulnerabilities in unified endpoint manager

See all →