Authentication Bypass in BMC Helix Network Management Software

CVE-2026-111283

What is CVE-2026-111283?

BMC Helix Network Management prior to version 26.3.01 suffers from an authentication bypass vulnerability when configured with SAML single sign-on. This flaw allows unauthorized users to gain access as the local administrator by submitting an arbitrary password along with the administrator username on the web login page. Upon successful login, attackers can acquire a SuperAdmin session, which grants them the ability to modify device credentials, execute commands on devices, and manipulate audit records, thus posing significant security risks.

References