Medium · 5.9 CVE-2026-18085 EUVD-2026-49897GHSA-xxhj-c62m-3wgm

Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

Published Jul 28, 2026 · Updated Jul 28, 2026 · Assigned by blackberry

Description

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.

Affected products

Vendor	Product	Affected	Fixed
BlackBerry	UEM	12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier	—

Advisories 1

WID-SEC-2026-2565 BlackBerry UEM Management Console: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 28, 2026

References

https://support.blackberry.com/pkb/s/article/141208