Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-13186 Path Traversal in Progress Telerik Ui For Aspnet Ajax (CVE-2026-13186)
CVE-2026-13185 Unsafe Deserialization in Progress Telerik Ui For Aspnet Ajax (CVE-2026-13185)
CVE-2026-13181 Vulnerability in Progress Telerik Ui For Aspnet Ajax (CVE-2026-13181)
CVE-2026-44191 OS Command Injection in Visual Studio Code Ansible Lightspeed extension (CVE-2026-44191)
CVE-2026-65603 Privilege Escalation in Grav Login plugin (CVE-2026-65603)
CVE-2026-65595 Privilege Escalation in n8n (CVE-2026-65595)
CVE-2026-63048 The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload,...
CVE-2026-15802 Vulnerability in WP Foodbakery (WordPress plugin) (CVE-2026-15802)
CVE-2026-8984 Code Injection in Autel Maxi Charger Single firmware (CVE-2026-8984)
CVE-2026-64878 OS Command Injection in Linux Tenable (CVE-2026-64878)
CVE-2026-63454 Path Traversal in AOS-CX (CVE-2026-63454)
CVE-2026-21575 Code Injection in Atlassian Sourcetree (CVE-2026-21575)
CVE-2026-64824 Path Traversal in Home Assistant Core (CVE-2026-64824)
CVE-2026-28305 Vulnerability in Solarwinds Serv U (CVE-2026-28305)
CVE-2026-28304 Vulnerability in Solarwinds Serv U (CVE-2026-28304)
CVE-2026-28308 Vulnerability in Solarwinds Serv U (CVE-2026-28308)
CVE-2026-28302 Vulnerability in Solarwinds Serv U (CVE-2026-28302)
CVE-2026-65008 Code Injection in Grav (CVE-2026-65008)
CVE-2026-1771 Vulnerability in MapSVG (WordPress plugin) (CVE-2026-1771)
CVE-2026-0770 KEV [KEV] Vulnerability in Langflow (CVE-2026-0770)
CVE-2026-16337 Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS...
CVE-2026-61424 The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to...
CVE-2026-61900 The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full...
CVE-2026-60032 The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to...
CVE-2026-34239 Vulnerability in Chamilo (CVE-2026-34239)
CVE-2026-41252 Vulnerability in xrdp (CVE-2026-41252)
CVE-2026-53421 Vulnerability in Apache (CVE-2026-53421)
CVE-2026-57311 Unrestricted File Upload in Windu CMS (CVE-2026-57311)
CVE-2026-12484 Unsafe Deserialization in keras (CVE-2026-12484)
CVE-2026-9323 The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id)...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details