CVE-2026-0980

HIGH

rubyipmi < 0.13.0 - Authenticated Remote Code Execution via BMC Username Injection

Title source: llm
STIX 2.1

Description

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

References (5)

Core 5
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:5968
https://access.redhat.com/errata/RHSA-2026:5968
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:5970
https://access.redhat.com/errata/RHSA-2026:5970
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:5971
https://access.redhat.com/errata/RHSA-2026:5971
Vendor Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2026-0980
Vendor Advisory issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2429874

Scores

CVSS v3 8.3
EPSS 0.0010
EPSS Percentile 27.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (19)
logicminds/rubyipmi < 0.12.1
Red Hat/Red Hat Satellite 6
Red Hat/Red Hat Satellite 6.16 for RHEL 8 0:0.13.0-0.1.el8sat
Red Hat/Red Hat Satellite 6.16 for RHEL 9 0:0.13.0-0.1.el9sat
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:0.0.3-4.el9sat
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:0.1.23-0.3.el9pc
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:0.13.0-1.el9sat
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:0.4.3-1.el9sat
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:1.2.0-0.1.el9pc
Red Hat/Red Hat Satellite 6.17 for RHEL 9 0:1.5.1-1.el9sat
... and 9 more
Published Feb 27, 2026
Tracked Since Feb 27, 2026