{"id":"CVE-2026-0980","title":"A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite","summary":"A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malic…","severity":"high","cvss":8.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-78"],"vendor":"redhat","product":"satellite","affected":["satellite = 6.0","rubyipmi <= 0.12.1"],"published":"2026-02-27","updated":"2026-11-03","sourceUpdated":"2026-11-03T18:17:49.373","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0980","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:5968","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5970","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5971","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-0980","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429874","label":"secalert@redhat.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-02-27T16:50:09.223915Z"},"epss":0.0085,"epssPercentile":0.58307,"ingestedAt":"2026-11-05T06:38:03.604Z","slug":"CVE-2026-0980","body":"## Overview\n\nA flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.\n\n## Affected\n\n- `satellite = 6.0`\n- `rubyipmi <= 0.12.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":45.7,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}