Remote Code Execution Vulnerability in Red Hat Satellite Baseboard Management Controller
CVE-2026-0980
8.3HIGH
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 27 February 2026
What is CVE-2026-0980?
A flaw exists in the RubyIPMI gem utilized within Red Hat Satellite's Baseboard Management Controller (BMC) component. An attacker with valid host creation or update permissions could exploit this flaw by crafting a malicious username for the BMC interface, potentially leading to a compromise of the system through remote code execution. This poses significant security risks, emphasizing the need for proper access control and regular updates to mitigate exposure.
Affected Version(s)
Red Hat Satellite 6.16 for RHEL 8 0:0.13.0-0.1.el8sat
Red Hat Satellite 6.16 for RHEL 8 0:0.13.0-0.1.el8sat
Red Hat Satellite 6.16 for RHEL 9 0:0.13.0-0.1.el9sat