Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-84190 Command Injection in LibreNMS (CVE-2026-84190)
CVE-2026-19952 Path Traversal in Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-19952)
CVE-2026-75921 Authorization Flaw in WordPress (CVE-2026-75921)
CVE-2026-75865 Unrestricted File Upload in WordPress (CVE-2026-75865)
CVE-2026-81891 Unrestricted File Upload in Studio-42/elFinder (CVE-2026-81891)
CVE-2026-66047 Vulnerability in WordPress (CVE-2026-66047)
CVE-2026-82673 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin…
CVE-2026-82473 Vulnerability in KubeEdge CloudCore (CVE-2026-82473)
CVE-2026-82472 Vulnerability in Documenso (CVE-2026-82472)
CVE-2026-82461 Vulnerability in pac4j-oidc (CVE-2026-82461)
CVE-2026-82450 Unrestricted File Upload in BookStack (CVE-2026-82450)
CVE-2026-14494 Unrestricted File Upload in Sigma Forms Pro (WordPress plugin) (CVE-2026-14494)
CVE-2026-82278 Code Injection in BISHENG (CVE-2026-82278)
CVE-2026-77939 Code Injection in Flextype CMS (CVE-2026-77939)
CVE-2026-81757 Unsafe Deserialization in Rank Math SEO (CVE-2026-81757)
CVE-2026-82244 Code Injection in Budibase (CVE-2026-82244)
CVE-2026-40013 An attacker that has valid credentials can submit a Sieve script containing an extreme numeric...
CVE-2026-14558 Unsafe Deserialization in WordPress (CVE-2026-14558)
CVE-2026-18983 Unrestricted File Upload in One User Avatar | User Profile Picture (WordPress plugin) (CVE-2026-18983)
CVE-2026-16759 Vulnerability in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-16759)
CVE-2026-38821 A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an...
CVE-2026-61802 Information Disclosure in Wazuh (CVE-2026-61802)
CVE-2026-61800 Path Traversal in Wazuh (CVE-2026-61800)
CVE-2026-5706 Vulnerability in Bluetooth Mesh SDK (CVE-2026-5706)
CVE-2026-76639 Path Traversal in Unitree G1 EDU firmware (CVE-2026-76639)
CVE-2026-53579 Cross-Site Scripting (XSS) in Trilium (CVE-2026-53579)
CVE-2026-53578 Cross-Site Scripting (XSS) in Trilium (CVE-2026-53578)
CVE-2026-48996 Cross-Site Scripting (XSS) in Trilium (CVE-2026-48996)
CVE-2026-47727 Code Injection in Trilium (CVE-2026-47727)
CVE-2026-37003 Code Injection in Agno (CVE-2026-37003)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details