CVE-2026-18247: Blackberry Athoc Iws

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.

Affected products

• Blackberry Blackberry Athoc Iws: before 7.21 HF-734 (fixed in 7.21 HF-734)

Published 2026-08-11. Last modified 2026-09-03.