Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-66066 Vulnerability in activestorage (CVE-2026-66066)
CVE-2026-54368 SQL Injection in CentreStack (CVE-2026-54368)
CVE-2026-54363 Vulnerability in CentreStack (CVE-2026-54363)
CVE-2026-44097 A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST...
CVE-2026-59327 Vulnerability in Broadcom Spring Tools (CVE-2026-59327)
CVE-2026-47858 Vulnerability in Broadcom Spring Tools (CVE-2026-47858)
CVE-2026-14602 Code Injection in Remote API (WordPress plugin) (CVE-2026-14602)
CVE-2026-16610 Unrestricted File Upload in Admin and Site Enhancements (ASE) Pro (WordPress plugin) (CVE-2026-16610)
CVE-2026-1360 Unsafe Deserialization in BuddyPress (WordPress plugin) (CVE-2026-1360)
CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability....
CVE-2026-5056 GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This...
CVE-2026-18022 Vulnerability in Pgvector (CVE-2026-18022)
CVE-2026-12357 Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution...
CVE-2026-16328 SSRF (Server-Side Request Forgery) in Exfiltration (CVE-2026-16328)
CVE-2026-12935 The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can...
CVE-2026-14266 Vulnerability in 7 Zip (CVE-2026-14266)
CVE-2026-41939 Vulnerability in Care Everywhere Gateway (CVE-2026-41939)
CVE-2026-67192 Vulnerability in Xlight FTP Server (CVE-2026-67192)
CVE-2026-65885 Unrestricted File Upload in Balbooa (CVE-2026-65885)
CVE-2026-14270 Unrestricted File Upload in WordPress (CVE-2026-14270)
CVE-2026-65883 Unsafe Deserialization in Aimy Captcha-Less Form (CVE-2026-65883)
CVE-2026-14900 Code Injection in Cost Calculator Builder PRO (WordPress plugin) (CVE-2026-14900)
CVE-2026-13423 Code Injection in Streamit (WordPress theme) (CVE-2026-13423)
CVE-2026-12476 Unrestricted File Upload in Easy Digital Downloads (WordPress plugin) (CVE-2026-12476)
CVE-2026-14976 Vulnerability in IBM WebSphere Application Server - Liberty (CVE-2026-14976)
CVE-2026-50738 Use-After-Free in Enterprisedb (CVE-2026-50738)
CVE-2026-66748 Code Injection in Camaleon CMS (CVE-2026-66748)
CVE-2026-51270 schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the...
CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 -...
CVE-2026-11756 A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details