BMC Helix Network Management on-prem — CVE-2026-111283 (Critical)

Date Oct 15, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product BMC · Helix Network Management on-prem

CVE CVE-2026-111283

Critical vendor advisory CVE-2026-111283

Summary

BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.0) in BMC Helix Network Management on-prem. Patch or mitigate promptly.

Operator check

Review CVE-2026-111283 in your asset inventory. Apply patches per vendor guidance and verify Helix Network Management on-prem is not exposed. CVSS score: 9.0.

Sources

NVD — CVE-2026-111283 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed