threat-research-and-intelligence

完全版インテリジェンスブログ | ブログ版レポート | レポート版要約 | 公開講演 ℹ️ :: 概要 このリポジトリは、BlackBerry Threat Research & Intelligence チームが公開した脅威インテリジェンスレポートから、IOC、YARA ルール、ソースコードを提供するためのものです。 スクリーンショットを含む完全な詳細レポートは ➡️ こちら 関連IOCを含む簡潔なブログ形式のレポートは ➡️ こちら 完全な詳細レポートの要約とIOCは ➡️ こちら 🔍 :: YARA ルール YARA...

CVE-2019-8997

CVE-2019-8997 BlackBerry AtHoc バージョン 7.6 HF-567 より前の Management System コンソール における XML External Entity Injection XXE の脆弱性により、攻撃者が既存のフィールドに悪意を持って細工された XML を入力することで、アプリケーションサーバー上の任意のローカルファイルを読み取ったり、ネットワーク上でリクエストを行ったりする可能性があります。 報告者 Nolan B. Kennedy nxkennedy セキュリティアドバイザリ...

BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of KEV...

CVE-2026-18247

The CVE-2026-18247 describes a DOM-based XSS in BlackBerry AtHoc Web Portals (AtHoc IWS). Affected versions are earlier than 7.21 HF-734; exploitation could allow an attacker to perform actions in the victim’s session. Remediation is to upgrade to 7.21 HF-734 or later. The available connected doc...

CVE-2026-18247 DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

CVE-2026-18085

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

EUVD-2026-49898

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18084

CVE-2026-18084 is an XSS vulnerability in the BlackBerry UEM Management Console due to improper neutralization of input during web page generation. Affected: BlackBerry UEM 12.23.0 QF8 or earlier. Impact: cross-site scripting with high potential impact; no exploitation details or remediations pro...

CVE-2026-18084

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

CVE-2026-18085

The vulnerability CVE-2026-18085 affects BlackBerry UEM, specifically the Management Console in BlackBerry UEM 12.23.0 QF8 and earlier. It is caused by improper input validation in the affected console, allowing Arbitrary File Download and potentially Denial of Service. Documents do not provide e...

CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

CVE-2026-18085: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service...

PT-2026-65531

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.23.0 QF9 Description Improper input validation in the BlackBerry UEM Management Console allows for arbitrary file download and potential denial of service. This occurs when the system fails to properly verif...

CVE-2026-18084: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting XSS. This issue affects UEM: 12.23.0 QF8 or earlier...

PT-2026-65530

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.23.0 QF9 Description Improper neutralization of input during web page generation in the BlackBerry UEM Management Console allows Cross-Site Scripting XSS, a condition where malicious scripts are injected int...