Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.5
CVE-2026-111283: BMC Helix Network Management allows admin login via SAML
CVE-2026-111283 · published today
Summary
The on‑premise BMC Helix Network Management product lets anyone log in as the local administrator when SAML single sign‑on is set up. An attacker can enter the admin username with any password and gain full control, including changing device credentials and editing audit logs. Update to version 26.3.01 or later, or disable SAML SSO until the patch is applied.
What to do
- Update bmc helix bmc helix network management to version 26.3.01 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| bmc helix | bmc helix network management | < 26.3.01 |
Original advisory text
BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
References
- https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-... release-notes vendor-advisory
- https://www.vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01... third-party-advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-305Authentication Bypass by Primary Weakness
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Track software like this
Free during beta