Rubyipmi
1 CVEs
product
Monthly
Remote code execution in Red Hat Satellite's rubyipmi BMC component allows authenticated users with host creation or update permissions to execute arbitrary code by injecting malicious input into the BMC username field. An attacker with these privileges can compromise the underlying system through command injection. No patch is currently available for this vulnerability.
RCE
Command Injection
Red Hat
Rubyipmi
Satellite
NVD
VulDB
CVSS 3.1
8.3
EPSS
0.2%
CVE-2026-0980
Ruby
EPSS 0%
CVSS 8.3
HIGH
PATCH
This Week
Remote code execution in Red Hat Satellite's rubyipmi BMC component allows authenticated users with host creation or update permissions to execute arbitrary code by injecting malicious input into the BMC username field. An attacker with these privileges can compromise the underlying system through command injection. No patch is currently available for this vulnerability.
RCE
Command Injection
Red Hat
+2
NVD
VulDB