CVE-2026-18085 - Vulnerability Details - OpenCVE

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

Attack Vector Network

Attack Complexity High

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://support.blackberry.com/pkb/s/article/141208

History

Tue, 28 Jul 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 28 Jul 2026 17:00:00 +0000

Type	Values Removed	Values Added
Description		An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Title		Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
Weaknesses		CWE-74
References		https://support.blackberry.com/pkb/s/article/141208
Metrics		cvssV4_0 `{'score': 5.9, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L'}`

MITRE

Status: PUBLISHED

Assigner: blackberry

Published: 2026-07-28T16:21:59.172Z

Updated: 2026-07-28T16:54:04.123Z

Reserved: 2026-07-28T15:56:24.271Z

Link: CVE-2026-18085

Vulnrichment

Updated: 2026-07-28T16:53:56.507Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18085", "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "state": "PUBLISHED", "assignerShortName": "blackberry", "dateReserved": "2026-07-28T15:56:24.271Z", "datePublished": "2026-07-28T16:21:59.172Z", "dateUpdated": "2026-07-28T16:54:04.123Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "shortName": "blackberry", "dateUpdated": "2026-07-28T16:33:22.238Z"}, "title": "Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-74", "description": "CWE-74: Improper Neutralization of Special Elements in Output (Injection)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-137", "descriptions": [{"lang": "en", "value": "CAPEC-137:\u00a0Parameter Injection"}]}], "affected": [{"vendor": "BlackBerry", "product": "UEM", "modules": ["Management Console"], "versions": [{"status": "affected", "version": "12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "An Improper Input Validation in the BlackBerry UEM\u00a0Management\u00a0Console\u00a0of\u00a0BlackBerry UEM\u00a012.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service."}]}], "references": [{"url": "https://support.blackberry.com/pkb/s/article/141208"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L"}}], "credits": [{"lang": "en", "value": "Christian Becker of Y-Security", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-28T16:53:31.439139Z", "id": "CVE-2026-18085", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T16:54:04.123Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18085", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-28T16:53:31.439139Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T16:53:56.507Z"}}], "cna": {"title": "Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Christian Becker of Y-Security"}], "impacts": [{"capecId": "CAPEC-137", "descriptions": [{"lang": "en", "value": "CAPEC-137:\u00a0Parameter Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "BlackBerry", "modules": ["Management Console"], "product": "UEM", "versions": [{"status": "affected", "version": "12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier"}], "defaultStatus": "affected"}], "references": [{"url": "https://support.blackberry.com/pkb/s/article/141208"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "An Improper Input Validation in the BlackBerry UEM\u00a0Management\u00a0Console\u00a0of\u00a0BlackBerry UEM\u00a012.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.", "supportingMedia": [{"type": "text/html", "value": "An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "CWE-74: Improper Neutralization of Special Elements in Output (Injection)"}]}], "providerMetadata": {"orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "shortName": "blackberry", "dateUpdated": "2026-07-28T16:33:22.238Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18085", "state": "PUBLISHED", "dateUpdated": "2026-07-28T16:54:04.123Z", "dateReserved": "2026-07-28T15:56:24.271Z", "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "datePublished": "2026-07-28T16:21:59.172Z", "assignerShortName": "blackberry"}, "dataVersion": "5.2"}