{"metadata": {"vulnerability": "CVE-2026-111283", "count": 23, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111283", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T19:56:09.918Z", "date_only": false, "value": "2026-10-15T19:56:09.918Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111283", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:26.742Z", "date_only": false, "value": "2026-10-15T21:43:26.742Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111283", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:57:29.956Z", "date_only": false, "value": "2026-10-15T21:57:29.956579Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447160595598357", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "a3b7c6ce-35f3-4f0e-88c6-d7c7aa807481", "content": "CVE-2026-111283 BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111283https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Network-Management/NetworkManagement/Release-Notes/On-prem-Release-Notes/BMC-Helix-Network-Management-26-3-01-On-prem-Release-Notes/https://www.vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01-authentication-bypass-via-saml-configuration#BMCHelix #BMCHelixNetworkManagement#CVE_2026_111283#bot", "url": "https://infosec.exchange/users/cve/statuses/117447160595598357"}, {"timestamp": "2026-10-15T22:19:29Z", "date_only": false, "value": "2026-10-15T22:19:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W2GX-X7WW-HGVM", "record": "GHSA-W2GX-X7WW-HGVM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:29.747Z", "date_only": false, "value": "2026-10-15T22:19:29.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111283", "record": "FKIE_CVE-2026-111283", "field": "published"}, {"timestamp": "2026-10-15T23:30:05.180Z", "date_only": false, "value": "2026-10-15T23:30:05.180975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxx7qql3wj2o", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "ce0dde98-3f28-41d8-ba43-5e4a202380d7", "content": "CVE-2026-111283 - bmc helix network management\nThe on\u2011premise BMC Helix Network Management product lets anyone log in as the local administrator when SAML single sign\u2011on is set up. An attacker can enter the admin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bmchelix #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxx7qql3wj2o"}, {"timestamp": "2026-10-16T00:08:04.966Z", "date_only": false, "value": "2026-10-16T00:08:04.966158Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxxbuoqmr72r", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "20c85574-35bb-4871-96bf-473236b3b059", "content": "\ud83d\udea8 CVE-2026-111283 \u2014 CVSS 9.5 CRITICAL\n\nBMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that al...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111283\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxxbuoqmr72r"}, {"timestamp": "2026-10-16T00:31:54Z", "date_only": false, "value": "2026-10-16T00:31:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W2GX-X7WW-HGVM", "record": "GHSA-W2GX-X7WW-HGVM", "field": "published"}, {"timestamp": "2026-10-16T16:35:50.466Z", "date_only": false, "value": "2026-10-16T16:35:50.466717Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111283", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:35:50.466Z", "date_only": false, "value": "2026-10-16T16:35:50.466717Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111283", "record": "FKIE_CVE-2026-111283", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:09:07.207Z", "date_only": false, "value": "2026-10-16T17:09:07.207Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111283", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T23:43:18.985Z", "date_only": false, "value": "2026-10-16T23:43:18.985017Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mattimustang/statuses/117453215332436695", "record": "cve-2026-111283", "field": "creation_timestamp", "uuid": "12045c29-b7c4-4f35-8e09-98c5485c7d00", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).\nThe client\u2019s IT team raised a support case the same day, BMC Helix shipped a fix in 26.3.01 eleven days later, and I coordinated disclosure with the BMC Helix team. Thanks to the client\u2019s IT team for moving quickly, and to BMC Helix for working through it with me.\nOn BHNM deployments before 26.3.01 where SAML single sign on is configured for the web interface, the built in local administrator account accepts any password. Any value at all! The resulting session has SuperAdmin access, which means:.\n- Read and modify stored credentials for every managed network device    - Run commands against those devices    - Query the underlying database as the database superuser    - Alter or disable the platform\u2019s own audit records\nThe admin account is local and isn\u2019t federated through the identity provider, so enabling SSO quietly left the front door open. Deployments using only local or LDAP authentication are not affected.\nIf you run BHNM on premises with SAML enabled, upgrade to 26.3.01 now, and keep the login page off networks that don\u2019t need it.\nFull writeup and disclosure timeline: https://github.com/cybliminal/cve-2026-111283-bmc-helix-network-management-local-administrator-any-password\n#cybersecurity #vulnerabilitydisclosure #CVE #BMCHelix #networksecurity", "url": "https://infosec.exchange/users/mattimustang/statuses/117453215332436695"}, {"timestamp": "2026-10-16T23:52:25.255Z", "date_only": false, "value": "2026-10-16T23:52:25.255793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhi7jok2f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "4d5a9ff7-4d4b-4a31-bf1a-b4e39ec5cec1", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhi7jok2f"}, {"timestamp": "2026-10-16T23:52:25.666Z", "date_only": false, "value": "2026-10-16T23:52:25.666592Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6lt22f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "60b0f078-1c5c-4df7-a2e9-2ecbc5077329", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6lt22f"}, {"timestamp": "2026-10-16T23:52:26.244Z", "date_only": false, "value": "2026-10-16T23:52:26.244748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6msc2f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "56131191-c9f5-4bc4-98a7-d7fc24da2182", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6msc2f"}, {"timestamp": "2026-10-16T23:52:26.682Z", "date_only": false, "value": "2026-10-16T23:52:26.682499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6rok2f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "d7c1add7-5f9b-4830-b2a7-5925f3471f73", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6rok2f"}, {"timestamp": "2026-10-16T23:52:27.126Z", "date_only": false, "value": "2026-10-16T23:52:27.126656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6tn22f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "047ea4a2-ba2b-4333-9639-60bfdd07a890", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6tn22f"}, {"timestamp": "2026-10-16T23:52:27.569Z", "date_only": false, "value": "2026-10-16T23:52:27.569866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6vlk2f", "record": "CVE-2026-111283", "field": "creation_timestamp", "uuid": "eab09848-af8c-4cde-81ce-7c759f362cc3", "content": "During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).", "url": "https://bsky.app/profile/mattimustang.com/post/3mxzrhj6vlk2f"}, {"timestamp": "2026-10-18T15:30:26Z", "date_only": false, "value": "2026-10-18T15:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W2GX-X7WW-HGVM", "record": "GHSA-W2GX-X7WW-HGVM", "field": "modified"}, {"timestamp": "2026-10-20T10:46:34.636Z", "date_only": false, "value": "2026-10-20T10:46:34.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111283", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T10:46:34.636Z", "date_only": false, "value": "2026-10-20T10:46:34.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111283", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T11:17:17.143Z", "date_only": false, "value": "2026-10-20T11:17:17.143", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111283", "record": "FKIE_CVE-2026-111283", "field": "lastModified"}]}