VYPR
← All advisories
High severity8.3NVD Advisory· Published Feb 27, 2026· Updated Jun 17, 2026

CVE-2026-0980

CVE-2026-0980

Description

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
rubyipmiRubyGems
< 0.13.00.13.0

Affected products

7
  • Red Hat/Satellitecpe-rescue2 versions
    cpe:/a:redhat:satellite:6+ 1 more
    • cpe:/a:redhat:satellite:6
    • cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*
  • Red Hat/Red Hat Satellite 6.16 for RHEL 9v5
    cpe:/a:redhat:satellite:6.16::el8
    Range: 0:0.13.0-0.1.el9sat
  • Red Hat/Red Hat Satellite 6.18 for RHEL 9v5
    cpe:/a:redhat:satellite:6.18::el9
    Range: 0:0.13.0-1.el9sat
  • Red Hat/Red Hat Satellite 6.17 for RHEL 9v5
    cpe:/a:redhat:satellite_maintenance:6.17::el9
    Range: 0:0.0.3-4.el9sat
  • Logicminds/Rubyipmi
    cpe:2.3:a:logicminds:rubyipmi:*:*:*:*:*:*:*:*
    Range: <=0.12.1
  • ghsa-coords
    pkg:gem/rubyipmi
    Range: < 0.13.0

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.