[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-18085":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":27,"cwes":28,"cpes":30,"technologies":48,"references":50,"score":52,"epss_score":53,"epss_percentile":54,"is_kev":55,"cisa_kev_date_added":56,"cisa_kev_due_date":56,"cisa_ssvc":57,"attack_mappings":67,"exploits":104},370069,"CVE-2026-18085","EUVD-2026-49897","An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.","2026-07-28T17:16:00Z",{"cvss_v3.1":10,"cvss_v4.0":21},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":19,"privilegesRequired":20,"confidentialityImpact":20},"CHANGED","3.1",6.9,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:H","LOW","REQUIRED","HIGH","NONE",{"Safety":22,"version":23,"Recovery":22,"baseScore":24,"Automatable":22,"attackVector":14,"baseSeverity":15,"valueDensity":22,"vectorString":25,"exploitMaturity":22,"providerUrgency":22,"userInteraction":26,"attackComplexity":19,"attackRequirements":20,"privilegesRequired":20,"subIntegrityImpact":17,"vulnIntegrityImpact":20,"integrityRequirement":22,"modifiedAttackVector":22,"subAvailabilityImpact":17,"vulnAvailabilityImpact":19,"availabilityRequirement":22,"modifiedUserInteraction":22,"modifiedAttackComplexity":22,"subConfidentialityImpact":20,"vulnConfidentialityImpact":20,"confidentialityRequirement":22,"modifiedAttackRequirements":22,"modifiedPrivilegesRequired":22,"modifiedSubIntegrityImpact":22,"modifiedVulnIntegrityImpact":22,"vulnerabilityResponseEffort":22,"modifiedSubAvailabilityImpact":22,"modifiedVulnAvailabilityImpact":22,"modifiedSubConfidentialityImpact":22,"modifiedVulnConfidentialityImpact":22},"NOT_DEFINED","4.0",5.9,"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","ACTIVE",true,[29],"CWE-74",[31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47],"cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix2:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix5:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix3:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix5:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix7:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix1:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix1:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix8:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:-:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:-:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix4:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix6:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix7:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix4:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix3:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix2:*:*:*:*:*:*","cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix6:*:*:*:*:*:*",[49],"Blackberry Unified Endpoint Manager",[51],"https:\u002F\u002Fsupport.blackberry.com\u002Fpkb\u002Fs\u002Farticle\u002F141208",0.5,0.00263,0.17905,false,null,{"timestamp":58,"automatable":59,"tech_impact":60,"exploitation":61,"cisa_decision":62,"cisa_remediation_timeline":66},"2026-07-28T16:53:31.439139Z","no","partial","none",{"vector":63,"decision":64,"priority":65},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:02:39.606734\u002F","track_star","medium","60D",[68,74,83,91,97],{"name":69,"source":70,"tactics":71,"technique_id":73},"Exploit Public-Facing Application","attack_vector",[72],"initial-access","T1190",{"name":75,"source":76,"cwe_ids":77,"tactics":78,"capec_ids":80,"technique_id":82},"Obfuscated Files or Information","capec",[29],[79],"stealth",[81],"CAPEC-267","T1027",{"name":84,"source":76,"cwe_ids":85,"tactics":86,"capec_ids":88,"technique_id":90},"Dynamic Linker Hijacking",[29],[87,79],"execution",[89],"CAPEC-13","T1574.006",{"name":92,"source":76,"cwe_ids":93,"tactics":94,"capec_ids":95,"technique_id":96},"Path Interception by PATH Environment Variable",[29],[87,79],[89],"T1574.007",{"name":98,"source":76,"cwe_ids":99,"tactics":100,"capec_ids":102,"technique_id":103},"Prevent Command History Logging",[29],[101],"defense-impairment",[89],"T1690",[]]