CVE-2026-0980 Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.
Problem types: cwe_id: CWE-78
description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Red Hat
product: Red Hat Satellite 6.16 for RHEL 8
cpes: cpe:/a:redhat:satellite:6.16::el8
cpe:/a:redhat:satellite_capsule:6.16::el9
cpe:/a:redhat:satellite_utils:6.16::el8
cpe:/a:redhat:satellite_utils:6.16::el9
cpe:/a:redhat:satellite_capsule:6.16::el8
cpe:/a:redhat:satellite_maintenance:6.16::el9
cpe:/a:redhat:satellite:6.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.16 for RHEL 8
cpes: cpe:/a:redhat:satellite:6.16::el8
cpe:/a:redhat:satellite_capsule:6.16::el9
cpe:/a:redhat:satellite_utils:6.16::el8
cpe:/a:redhat:satellite_utils:6.16::el9
cpe:/a:redhat:satellite_capsule:6.16::el8
cpe:/a:redhat:satellite_maintenance:6.16::el9
cpe:/a:redhat:satellite:6.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.16 for RHEL 9
cpes: cpe:/a:redhat:satellite:6.16::el8
cpe:/a:redhat:satellite_capsule:6.16::el9
cpe:/a:redhat:satellite_utils:6.16::el8
cpe:/a:redhat:satellite_utils:6.16::el9
cpe:/a:redhat:satellite_capsule:6.16::el8
cpe:/a:redhat:satellite_maintenance:6.16::el9
cpe:/a:redhat:satellite:6.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.16 for RHEL 9
cpes: cpe:/a:redhat:satellite:6.16::el8
cpe:/a:redhat:satellite_capsule:6.16::el9
cpe:/a:redhat:satellite_utils:6.16::el8
cpe:/a:redhat:satellite_utils:6.16::el9
cpe:/a:redhat:satellite_capsule:6.16::el8
cpe:/a:redhat:satellite_maintenance:6.16::el9
cpe:/a:redhat:satellite:6.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.17 for RHEL 9
cpes: cpe:/a:redhat:satellite_maintenance:6.17::el9
cpe:/a:redhat:satellite:6.17::el9
cpe:/a:redhat:satellite_utils:6.17::el9
cpe:/a:redhat:satellite_capsule:6.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.18 for RHEL 9
cpes: cpe:/a:redhat:satellite:6.18::el9
cpe:/a:redhat:satellite_utils:6.18::el9
cpe:/a:redhat:satellite_capsule:6.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6.18 for RHEL 9
cpes: cpe:/a:redhat:satellite:6.18::el9
cpe:/a:redhat:satellite_utils:6.18::el9
cpe:/a:redhat:satellite_capsule:6.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Satellite 6
cpes: cpe:/a:redhat:satellite:6
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
version: 3.1
Published: 2026-02-27T07:30:42.657Z