{"id":"CVE-2026-111283","published":"2026-10-15T22:19:29.747","lastModified":"2026-10-16T18:17:37.473","description":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.","cvssScore":9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-305"],"vendors":[],"products":[],"references":[{"url":"https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Network-Management/NetworkManagement/Release-Notes/On-prem-Release-Notes/BMC-Helix-Network-Management-26-3-01-On-prem-Release-Notes/","tags":[]},{"url":"https://www.vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01-authentication-bypass-via-saml-configuration","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"BMC Helix Network Management allows unauthenticated attackers to bypass authentication and gain SuperAdmin access when SAML single sign-on is configured, enabling full administrative control without valid credentials.","exploitability":"Exploitation requires only a web browser and knowledge of the admin username, with no prerequisites beyond SAML configuration, making it highly practical for remote attackers.","blast_radius":"An attacker could fully compromise network infrastructure management by gaining SuperAdmin privileges, allowing them to modify device credentials, execute commands, and alter audit trails across the managed environment.","remediation":"Disable SAML single sign-on configuration until a patch is available or upgrade to version 26.3.01 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","network-management","saml"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:52:05.369Z"}}