CVE-2026-18085

Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM PUBLISHED

Description (CNA)

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

Affected (CNA)

Vendor / product	Versions
BlackBerry / UEM	affected 12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier

CWE

CWE-74

References

https://support.blackberry.com/pkb/s/article/141208

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.