CVE-2026-18085: Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
Published Jul 28, 2026
·Updated
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Affected Software
1 affected component
BlackBerry BlackBerry UEM Management Console<=12.23.0 QF8
Event History
Jul 28, 2026
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
DescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-18085?
CVE-2026-18085 has a risk score of 47, indicating a moderate severity level.
2
How do I fix CVE-2026-18085?
To mitigate CVE-2026-18085, ensure you update to BlackBerry UEM version 12.23.1 or later.
3
What are the potential impacts of CVE-2026-18085?
CVE-2026-18085 can lead to arbitrary file downloads and potential denial of service.
4
Which versions of BlackBerry UEM are affected by CVE-2026-18085?
CVE-2026-18085 affects BlackBerry UEM 12.23.0 QF8 and earlier versions.
5
What is the cause of CVE-2026-18085?
CVE-2026-18085 is caused by improper input validation in the BlackBerry UEM Management Console.