Skip to content
OpenAdvisories
High · 8.6 CVE-2026-18084 EUVD-2026-49898GHSA-324m-xxrv-v73q

Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Published Jul 28, 2026 · Updated Jul 31, 2026 · Assigned by blackberry

Description

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS).

This issue affects UEM: 12.23.0 QF8 or earlier.

Affected products

VendorProductAffectedFixed
BlackBerry UEM 12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier —

Advisories 1

References