EUVD-2026-49898

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084

CVE-2026-18084 is an XSS vulnerability in the BlackBerry UEM Management Console due to improper neutralization of input during web page generation. Affected: BlackBerry UEM 12.23.0 QF8 or earlier. Impact: cross-site scripting with high potential impact; no exploitation details or remediations pro...

CVE-2026-18085

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

EUVD-2026-49897

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085

The vulnerability CVE-2026-18085 affects BlackBerry UEM, specifically the Management Console in BlackBerry UEM 12.23.0 QF8 and earlier. It is caused by improper input validation in the affected console, allowing Arbitrary File Download and potentially Denial of Service. Documents do not provide e...

CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351877...

CVE-2026-7521 SAML certificate deletion allows path traversal to delete arbitrary files outside the config directory

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

CVE-2026-7521

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

CVE-2026-7521 SAML certificate deletion allows path traversal to delete arbitrary files outside the config directory

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

EUVD-2026-49852

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

CVE-2026-7521

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-61487 Source advisory: MEND:CVE-2026-61487...

Pandora FMS Mobile Console Login Panel - Detect

Pandora FMS Mobile Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pandora FMS Mobile Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pandora FMS Mobil...

Grails Admin Console Panel - Detect

Grails Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Grails Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grails Admin Console Panel - Detect',...

Apache ActiveMQ Artemis - Detection

Detects a Apache ActiveMQ Artemis Console, the next generation message broker by ActiveMQ. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache ActiveMQ Artemis Console, the next generation message broker by ActiveMQ.""" from kittysploit import from lib.protocols.http.httpclient import...

Hybris Management Console Login Panel - Detect

Hybris Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hybris Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hybris Management...

Dialogic XMS Admin Console - Detect

Detects Dialogic XMS Admin Console - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dialogic XMS Admin Console - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dialogic XMS Admin Console -...

OpenBao Web UI Panel - Detect

Detects the presence of the OpenBao web console. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the OpenBao web console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenBao Web UI Panel -...