Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,912

Image ID Title
CVE-2024-7399 KEV [KEV] Path Traversal in Samsung magicinfo-9-server (CVE-2024-7399)
CVE-2024-57728 KEV [KEV] Path Traversal in Simplehelp path-traversal (CVE-2024-57728)
CVE-2024-57726 KEV [KEV] Vulnerability in Simplehelp auth (CVE-2024-57726)
CVE-2026-6942 OS Command Injection in radare2-mcp (CVE-2026-6942)
CVE-2025-62373 Unsafe Deserialization in pipecat-ai (CVE-2025-62373)
CVE-2026-3960 Code Injection in ai.h2o:h2o-core (CVE-2026-3960)
CVE-2026-39987 KEV [KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987)
CVE-2026-34414 Path Traversal in Xerte Online Toolkits (CVE-2026-34414)
CVE-2026-34413 Vulnerability in Xerte Online Toolkits (CVE-2026-34413)
CVE-2026-41144 Vulnerability in Nasa (CVE-2026-41144)
CVE-2026-21571 OS Command Injection in Atlassian Bamboo (CVE-2026-21571)
CVE-2026-31019 OS Command Injection in Dolibarr (CVE-2026-31019)
CVE-2026-39918 Code Injection in Vvveb (CVE-2026-39918)
CVE-2026-34427 Vulnerability in Vvveb (CVE-2026-34427)
CVE-2026-34429 Cross-Site Scripting (XSS) in Vvveb (CVE-2026-34429)
CVE-2024-27199 KEV [KEV] Vulnerability in Jetbrains teamcity (CVE-2024-27199)
CVE-2026-40066 Vulnerability in Anviz (CVE-2026-40066)
CVE-2026-5718 Unrestricted File Upload in WordPress (CVE-2026-5718)
CVE-2026-41113 sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in…
CVE-2026-5426 Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior...
CVE-2026-31843 Vulnerability in goodoneuz/pay-uz (CVE-2026-31843)
CVE-2026-34197 KEV [KEV] Vulnerability in Apache activemq (CVE-2026-34197)
CVE-2026-40316 Code Injection in OWASP BLT (CVE-2026-40316)
CVE-2026-30461 Command Injection in Fuel Cms (CVE-2026-30461)
CVE-2026-39387 Vulnerability in BoidCMS (CVE-2026-39387)
CVE-2026-39399 NuGet Gallery is a package repository that powers nuget.org. A security vulnerability exists in the NuGetGallery…
CVE-2026-35031 Vulnerability in Jellyfin (CVE-2026-35031)
CVE-2026-24893 Vulnerability in It Novum (CVE-2026-24893)
CVE-2026-32157 Use-After-Free in Remote Desktop Client (CVE-2026-32157)
CVE-2009-0238 KEV [KEV] Code Injection in Microsoft office (CVE-2009-0238)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details