Remote Code Execution

⚔️ Attack Types Related 2,905
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-91963 Vulnerability in FreeRDP (CVE-2026-91963)
CVE-2026-91932 Vulnerability in Flowise (CVE-2026-91932)
CVE-2026-91931 OS Command Injection in Flowise (CVE-2026-91931)
CVE-2026-19407 Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior...
CVE-2026-89308 An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing...
CVE-2026-75983 Privilege Escalation in WordPress (CVE-2026-75983)
CVE-2026-90932 Vulnerability in LaraDashboard (CVE-2026-90932)
CVE-2026-90919 Unsafe Deserialization in LightLLM (CVE-2026-90919)
CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in...
CVE-2026-90770 OS Command Injection in Spug (CVE-2026-90770)
CVE-2026-90553 Code Injection in vLLM (CVE-2026-90553)
CVE-2026-85200 Vulnerability in GEO my WP (WordPress plugin) (CVE-2026-85200)
CVE-2026-78006 Unsafe Deserialization in Events Calendar (WordPress plugin) (CVE-2026-78006)
CVE-2026-78159 Code Injection in Events Calendar (WordPress plugin) (CVE-2026-78159)
CVE-2026-78175 Unsafe Deserialization in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-78175)
CVE-2026-81402 Unrestricted File Upload in DS Ad Rotator (WordPress plugin) (CVE-2026-81402)
CVE-2026-81090 Cross-Site Request Forgery (CSRF) in Gpx2Graphics (WordPress plugin) (CVE-2026-81090)
CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and...
CVE-2026-72710 Vulnerability in SPIP (CVE-2026-72710)
CVE-2026-8778 Unrestricted File Upload in WordPress (CVE-2026-8778)
CVE-2026-89094 Vulnerability in Forgejo (CVE-2026-89094)
CVE-2026-81048 Command Injection in Dell ThinOS (CVE-2026-81048)
CVE-2026-81803 Code Injection in RepairBuddy (CVE-2026-81803)
CVE-2026-88889 OS Command Injection in Renovate (CVE-2026-88889)
CVE-2026-18351 Unrestricted File Upload in Drag and Drop File Upload for Elementor Forms (WordPress plugin) (CVE-2026-18351)
CVE-2026-73769 A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an...
CVE-2026-8044 Vulnerability in CWE-88 (CVE-2026-8044)
CVE-2026-87874 Unsafe Deserialization in community.general Ansible collection (CVE-2026-87874)
CVE-2026-67401 A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root...
CVE-2026-26212 Unrestricted File Upload in Rara One Click Demo Import plugin for WordPress (CVE-2026-26212)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details