CVE-2026-111283: Authentication Bypass by Primary Weakness in BMC Helix BMC Helix Network Management
Description
BMC Helix Network Management on-premises versions prior to 26.3.01 have an authentication bypass vulnerability when SAML single sign-on is configured. This flaw allows unauthenticated attackers to log in as the local administrator using any password. Successful exploitation grants a SuperAdmin session, enabling attackers to modify device credentials, execute device commands, and alter audit records.
CVSS v4.0
Score 9.5critical
Affected software
BMC Helix
BMC Helix Network Management
pkg:github/bmc-helix/network-managementRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-111283 is an authentication bypass vulnerability in BMC Helix Network Management on-premises versions before 26.3.01. When SAML single sign-on is enabled, the web login page improperly allows unauthenticated attackers to submit the administrator username with any password and gain SuperAdmin access. This access permits attackers to modify device credentials, run commands on devices, and alter audit logs, severely compromising system integrity and security.
Potential Impact
An unauthenticated attacker can gain full administrative privileges, including the ability to change device credentials, execute arbitrary device commands, and modify audit records. This compromises the confidentiality, integrity, and availability of the affected system and connected devices. The vulnerability has a CVSS 4.0 score of 9.5, indicating critical severity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider disabling SAML single sign-on if feasible or restrict access to the web login interface to trusted networks only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-15T19:56:09.918Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad14e312cdf04f6566084fc
Added to database: 10/15/2026, 22:05:37 UTC
Last enriched: 10/15/2026, 22:33:49 UTC
Last updated: 10/15/2026, 22:33:49 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.