Vulnerability · Published Oct 15, 2026 · Assigned by VulnCheck
CVE-2026-111283BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
Critical 9.0
In plain English
A critical-severity security flaw in BMC Helix Network Management from BMC Helix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BMC Helix | BMC Helix Network Management | 26.3.00 – before 26.3.01 |
Weakness: CWE-305 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Network-Management/NetworkManagement/Release-Notes/On-prem-Release-Notes/BMC-Helix-Network-Management-26-3-01-On-prem-Release-Notes/ release-notes, vendor-advisory
- https://github.com/cybliminal/cve-2026-111283-bmc-helix-network-management-local-administrator-any-password technical-description
- VulnCheck Advisory: BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration third-party-advisory