Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,912

Image ID Title
CVE-2026-5497 Vulnerability in vllm (CVE-2026-5497)
CVE-2026-41699 Unsafe Deserialization in org.springframework.graphql:spring-graphql (CVE-2026-41699)
CVE-2026-10795 Vulnerability in UpdraftPlus: WP Backup & Migration Plugin (WordPress plugin) (CVE-2026-10795)
CVE-2026-50223 Code Injection in Apache Ofbiz (CVE-2026-50223)
CVE-2026-2049 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...
CVE-2026-46529 Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote…
CVE-2026-20251 Unsafe Deserialization in Splunk Enterprise (CVE-2026-20251)
CVE-2026-45556 Vulnerability in Apache (CVE-2026-45556)
CVE-2026-45558 Vulnerability in Apache (CVE-2026-45558)
CVE-2026-52751 Unsafe Deserialization in Ghidra (CVE-2026-52751)
CVE-2026-11815 An attacker who intercepts and tampers with traffic between the client application and the API...
CVE-2026-44963 A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated...
CVE-2026-48030 OS Command Injection in pheditor/pheditor (CVE-2026-48030)
CVE-2026-48306 Out-of-Bounds Write in Substance3D - Sampler (CVE-2026-48306)
CVE-2026-48305 Out-of-Bounds Write in Substance3D - Sampler (CVE-2026-48305)
CVE-2026-47906 Vulnerability in Adobe macOS (CVE-2026-47906)
CVE-2026-47907 Vulnerability in Adobe macOS (CVE-2026-47907)
CVE-2026-47908 Vulnerability in Adobe macOS (CVE-2026-47908)
CVE-2026-34709 Out-of-Bounds Write in Substance3D - Sampler (CVE-2026-34709)
CVE-2026-34710 Out-of-Bounds Write in Substance3D - Sampler (CVE-2026-34710)
CVE-2026-36723 An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3...
CVE-2026-45447 Use-After-Free in Openssl (CVE-2026-45447)
CVE-2026-49959 OS Command Injection in Hermes WebUI (CVE-2026-49959)
CVE-2026-10520 KEV [KEV] OS Command Injection in Ivanti Sentry (CVE-2026-10520)
CVE-2026-9279 OS Command Injection in Logseq (CVE-2026-9279)
CVE-2026-49740 Unsafe Deserialization in typo3/cms-core (CVE-2026-49740)
CVE-2026-8365 Unsafe Deserialization in Blocksy (WordPress theme) (CVE-2026-8365)
CVE-2026-45034 Unsafe Deserialization in phpoffice/phpspreadsheet (CVE-2026-45034)
CVE-2026-40519 OS Command Injection in Nginx Proxy Manager (CVE-2026-40519)
CVE-2026-25559 Path Traversal in OpenBullet2 through (CVE-2026-25559)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details