CVE-2026-57830

Helix Ultimate Framework — Unauthenticated Path-Traversal Arbitrary File/Folder Read+Delete This is a confirmed DoS + cross-tenant filesystem access vulnerability, NOT RCE. An RCE-escalation theory delete configuration.php to re-expose the Joomla installer was tested live and disproved — see "RCE...

CVE-2026-57829

Helix Ultimate Framework — Unauthenticated Stored XSS comajax → Admin Session-Riding → Full Account Takeover This is the strongest finding in this research folder — CRITICAL, fully confirmed end-to-end. Unlike the delete-only bug in helixultimatedeletepoc.md, this one has a real, working path to...

Malicious code in bq-helix-recon-6ade983e (PyPI)

Source: kam193 9663aaa7e713f47d83da712da5653aa7d3e1919fd70419d9fc5749145f575b17 Package places PTH/sitecustomize files triggering execution of malicious code on every Python startup. The code then collects information from the environment, including credential files, environment variables, data...

Malicious code in bq-helix-build-hook-6ade983e (PyPI)

Source: kam193 ee26602dfa25f574d440b2c1e8ef0a9516fdfb5db4b59f995b88784332476413 During installation the code collects information from the environment, including credential files, environment variables, data from cloud metadata endpoints, and finally exfiltrates them. --- Category: MALICIOUS - Th...

Malicious code in bq-helix-build-hook-6ade983e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ff13fe63e15fdf4130e7219776edbe4d34fe2c2b83011099a0ddec9c10ebf6 On pip install, setup.py collects the full process environment dictos.environ, process command lines, and /proc/self/status,cgroup,mountinfo,fd, and...

Malicious code in bq-helix-recon-6ade983e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2ea78473cb414982a67f3fa93db3427b98c6e3bcc5d70f6bbb0ededba7791e The package ships bqhelixrecon.pth plus sitecustomize.py/usercustomize.py that invoke bootstrap on every Python interpreter start — including pip's o...

CVE-2026-113697

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link...

EUVD-2026-112829

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link...

CVE-2026-113697 Reflected Cross-Site Scripting in BMC Helix Operations Management

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link...

CVE-2026-113697

BMC Helix Operations Management version 25.4.00 is vulnerable to a reflected cross-site scripting (XSS) vulnerability in its agent query feature . This flaw allows an authenticated attacker to execute arbitrary scripts in another user's browser session if that user clicks a crafted link. The vuln...

p4wned

P4WNED CVE-2026-6043 Perforce Helix Core security research tools and nuclei templates. Research article: https://morganrobertson.net/p4wned/ Please read the above for complete details. Authorised targets only. Use on your own servers or with explicit written permission. Intended audience: Perforc...

BMC Helix Network Management Authentication Bypass

BMC Helix Network Management versions before 26.3.01 contain an authentication bypass when SAML-based single sign-on is configured, allowing the local administrator account to authenticate with any password...

EUVD-2026-102474

BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrar...

CVE-2026-111283

BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an...

CVE-2026-111283 BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration

BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an...

CVE-2026-111283

BMC Helix Network Management on-prem versions before 26.3.01 are vulnerable to an authentication bypass when SAML single sign-on is configured. This flaw allows unauthenticated attackers to gain a SuperAdmin session by submitting the local administrator username with an arbitrary password on the ...

CVE-2026-111283 BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration

BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an...

PT-2026-115274

Name of the Vulnerable Software and Affected Versions BMC Helix Network Management on-prem versions prior to 26.3.01 Description An authentication bypass exists when SAML single sign-on is configured. This allows unauthenticated attackers to log in as the local administrator by submitting the...

CVE-2026-111283: Authentication Bypass by Primary Weakness

BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an...

BMC Helix Network Management Authorization Issues Vulnerability

Versions of BMC Helix Network Management prior to 26.3.01 have an authorization issue vulnerability. This vulnerability stems from the bypass of authentication when configuring SAML single-sign-on. Unverified attackers can log in as a local administrator using any password. By submitting an...