CRITICAL 9.5 NVD
CVE-2026-111283
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
References
- https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Netw
- https://www.vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01-authentic
This critical severity vulnerability with a CVSS score of 9.5 was published on 2026-10-15 via NVD.
Risk Timeline
CVE Disclosed2026-10-15 · -1 days ago
Remediation Resources
vulnfeed aggregates 14677 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.