PT-2026-22312 · Rubyipmi · Rubyipmi

Published 2026-02-27 · Updated 2026-03-05 · CVE-2026-0980

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rubyipmi (affected versions not specified)

Description A flaw exists in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker possessing host creation or update permissions can exploit this issue by constructing a malicious username for the BMC interface. Successful exploitation can result in remote code execution (RCE) on the system. The vulnerability allows an attacker to execute arbitrary code on the target system through the BMC interface. The vulnerable component is the BMC interface, and the attack vector involves crafting a malicious username.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-0980

GHSA-HFCP-477W-3WJW

RHSA-2026:5968

RHSA-2026:5970

RHSA-2026:5971

Affected Products

Rubyipmi

References · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubyipmi/CVE-2026-0980.yml · Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=2429874 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-0980 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5970 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5971 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5968 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hfcp-477w-3wjw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-0980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0980 · Security Note
• https://github.com/logicminds/rubyipmi · Note
• https://github.com/logicminds/rubyipmi/commit/252503a7b4dca68388165883b0322024e344a215 · Note
• https://twitter.com/CVEnew/status/2027380179136389495 · Twitter Post
• https://t.me/CVEtracker/45956 · Telegram Post
• https://twitter.com/rubylandnews/status/2027916837590126761 · Twitter Post
• https://twitter.com/CveTodo/status/2027300037429010771 · Twitter Post