What is the CVSS score of CVE-2026-0980?

CVE-2026-0980 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.2%.

Which versions of Red Hat are affected by CVE-2026-0980?

Red Hat Satellite BMC components are vulnerable to privilege escalation attacks from authenticated users with host creation permissions, potentially allowing unauthorized system access and control.. A patch is available.

How to fix or mitigate CVE-2026-0980?

Within 24 hours: Audit Red Hat Satellite user permissions and restrict host creation/update access to trusted administrators only. Within 7 days: Implement network segmentation to isolate BMC interfaces and disable direct BMC access where feasible. Within 30 days: Monitor vendor advisories for patch availability and prepare deployment procedures; consider upgrading to patched Satellite versions when released.

Red Hat CVE-2026-0980

HIGH

OS Command Injection (CWE-78)

2026-02-27 secalert@redhat.com

GHSA-hfcp-477w-3wjw

Red Hat RCE Command Injection

8.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Red Hat

8.3 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 08:17 nvd

HIGH 8.3

DescriptionCVE.org

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

AnalysisAI

Remote code execution in Red Hat Satellite's rubyipmi BMC component allows authenticated users with host creation or update permissions to execute arbitrary code by injecting malicious input into the BMC username field. An attacker with these privileges can compromise the underlying system through command injection. No patch is currently available for this vulnerability.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Satellite. A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.