CVE-2026-0980 - Vulnerability Analysis

Overview

Red Hat Satellite rubyipmi gem contains a remote code execution caused by crafted malicious username in BMC interface, letting authenticated attackers with host creation or update permissions execute code remotely, exploit requires specific permissions.

Severity & Score

Impact

Authenticated attackers with host creation or update permissions can execute arbitrary code remotely, potentially compromising the system.

Mitigation

Update rubyipmi gem to the latest version.

References

• https://access.redhat.com/security/cve/CVE-2026-0980
• https://bugzilla.redhat.com/show_bug.cgi?id=2429874

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 28, 2026

🟠 CVE-2026-0980 - High (8.3) A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious usern... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0980/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner