Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-82404 Vulnerability in @toon-format/toon (CVE-2026-82404)
CVE-2026-84671 Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary...
CVE-2026-84645 Code Injection in Jenkins (CVE-2026-84645)
CVE-2026-10821 Vulnerability in WordPress Apache (CVE-2026-10821)
CVE-2026-19219 Vulnerability in Progress Telerik UI for AJAX (CVE-2026-19219)
CVE-2026-78657 Path Traversal in SigmaForms Pro – AI Generated Forms (WordPress plugin) (CVE-2026-78657)
CVE-2026-14357 Vulnerability in DevKit Pro (WordPress plugin) (CVE-2026-14357)
CVE-2026-19116 Unsafe Deserialization in WordPress (CVE-2026-19116)
CVE-2026-14957 In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts...
CVE-2026-14982 Path Traversal in WP File Download (WordPress plugin) (CVE-2026-14982)
CVE-2026-84374 Path Traversal in maatwebsite/excel (CVE-2026-84374)
CVE-2026-76851 SSRF (Server-Side Request Forgery) in GitHub Enterprise Server (CVE-2026-76851)
CVE-2026-83549 KEV [KEV] OS Command Injection in Sonicwall Sma8200V (CVE-2026-83549)
CVE-2026-75604 Path Traversal in next (CVE-2026-75604)
CVE-2026-19118 Vulnerability in GitHub Enterprise (CVE-2026-19118)
CVE-2026-73782 Vulnerability in AOS-CX (CVE-2026-73782)
CVE-2026-73765 Path Traversal in Hpe (CVE-2026-73765)
CVE-2026-73750 Vulnerability in Hpe (CVE-2026-73750)
CVE-2026-73752 Path Traversal in AOS-CX (CVE-2026-73752)
CVE-2026-73749 Vulnerability in Hpe (CVE-2026-73749)
CVE-2026-71981 Unsafe Deserialization in Cypht (CVE-2026-71981)
CVE-2026-73720 Vulnerability in Arubanetworks (CVE-2026-73720)
CVE-2026-73716 OS Command Injection in HPE Networking Fabric Composer (CVE-2026-73716)
CVE-2026-73701 Code Injection in HPE Networking Fabric Composer and (CVE-2026-73701)
CVE-2026-72649 Unsafe Deserialization in Elasticsearch (CVE-2026-72649)
CVE-2026-10195 Command Injection in FS-Poster (WordPress plugin) (CVE-2026-10195)
CVE-2026-75538 An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed…
CVE-2026-84218 Vulnerability in org.jolokia:jolokia-service-jsr160 (CVE-2026-84218)
CVE-2026-19513 Unrestricted File Upload in Gravity Forms (WordPress plugin) (CVE-2026-19513)
CVE-2026-84194 OS Command Injection in LibreNMS (CVE-2026-84194)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details