CVE-2026-18084 is a Cross-Site Scripting (XSS) vulnerability in the BlackBerry UEM Management Console. It results from improper neutralization of input during web page generation. The vulnerability affects BlackBerry UEM versions 12.23.0 QF8 and earlier, including 12.22.1 QF7 and earlier. The CVSS v3.1 base score is 6.1, indicating a high severity level. This vulnerability allows an attacker to inject malicious scripts that could lead to limited confidentiality and integrity impacts but does not affect availability. No known exploits are reported in the wild. There is no explicit patch or remediation information provided in the source data.