CVE-2026-18084 — Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

CVE-2026-18084

Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

Affected (CNA)

Vendor / product	Versions
BlackBerry / UEM	affected 12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier

CWE

CWE-79

References

https://support.blackberry.com/pkb/s/article/141208

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.