CVE-2026-111283

Summary

BMC Helix Network Management allows unauthenticated attackers to bypass authentication and gain SuperAdmin access when SAML single sign-on is configured, enabling full administrative control without valid credentials.

Exploitability

Exploitation requires only a web browser and knowledge of the admin username, with no prerequisites beyond SAML configuration, making it highly practical for remote attackers.

Blast radius

An attacker could fully compromise network infrastructure management by gaining SuperAdmin privileges, allowing them to modify device credentials, execute commands, and alter audit trails across the managed environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable SAML single sign-on configuration until a patch is available or upgrade to version 26.3.01 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.