Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-71291 Vulnerability in Bolt Cms (CVE-2026-71291)
CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...
CVE-2026-71279 Path Traversal in Zigbee2MQTT (CVE-2026-71279)
CVE-2026-71269 Path Traversal in Node-RED (CVE-2026-71269)
CVE-2026-71268 OpenPLC Runtime v3's compile_program() function (webserver/openplc.py) parses `(*FILE:path...
CVE-2026-71271 Memos' webhook URL validation, isReservedIP() (internal/webhook/validate.go), checks a candidate...
CVE-2026-71262 IoTSharp BlobStorageController.cs lacks the [Authorize] attribute applied to every other...
CVE-2026-71259 Vulnerability in ESPHome (CVE-2026-71259)
CVE-2026-71254 Out-of-Bounds Write in nanoMODBUS (CVE-2026-71254)
CVE-2026-18933 Unrestricted File Upload in wp-downloadmanager (WordPress plugin) (CVE-2026-18933)
CVE-2026-60009 Path Traversal in Eclipse Theia (CVE-2026-60009)
CVE-2026-71232 Code Injection in MacCMS10 (CVE-2026-71232)
CVE-2026-66747 Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every...
CVE-2026-6147 Unrestricted File Upload in LightSync Pro (WordPress plugin) (CVE-2026-6147)
CVE-2026-70376 Cross-Site Request Forgery (CSRF) in Pluck CMS (CVE-2026-70376)
CVE-2026-55739 Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce...
CVE-2026-54418 Vulnerability in Leantime (CVE-2026-54418)
CVE-2026-54416 Unrestricted File Upload in Pluck CMS (CVE-2026-54416)
CVE-2026-14553 Unrestricted File Upload in zportals (WordPress plugin) (CVE-2026-14553)
CVE-2026-18859 Vulnerability in ESAFENET CDG (CVE-2026-18859)
CVE-2026-70554 Unsafe Deserialization in MaxSite CMS (CVE-2026-70554)
CVE-2026-45538 Vulnerability in OpenSIPS (CVE-2026-45538)
CVE-2026-70553 Code Injection in MaxSite CMS (CVE-2026-70553)
CVE-2026-15307 Vulnerability in Django (CVE-2026-15307)
CVE-2026-69264 Code Injection in flowise (CVE-2026-69264)
CVE-2026-69100 Code Injection in LAMP Rapid Development Platform (CVE-2026-69100)
CVE-2026-69098 Unsafe Deserialization in kotaemon (CVE-2026-69098)
CVE-2026-67195 Vulnerability in Perspective (CVE-2026-67195)
CVE-2026-16618 Unrestricted File Upload in Improve SEO (WordPress plugin) (CVE-2026-16618)
CVE-2026-66065 Vulnerability in Ouroboros (CVE-2026-66065)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details