CVE-2026-111283
BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
BMC Helix BMC Helix Network Management
CVSS
9.5CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.53%Chance of exploitation activity in the next 30 days, higher than 43% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 26.3.01BMC Helix Network ManagementCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
Text from CVE List
Affected versions 1
- BMC Helix Network Managementaffected: 26.3.00 before 26.3.01CVE List
References 3
- docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Network-Management/NetworkManagement/Release-Notes/On-prem-Release-Notes/BMC-Helix-Network-Management-26-3-01-On-prem-Release-Notes/Fixvia CVE List
- vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01-authentication-bypass-via-saml-configurationAdvisoryvia CVE List
- github.com/cybliminal/cve-2026-111283-bmc-helix-network-management-local-administrator-any-passwordReferencevia CVE List