Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-54675 Path Traversal in Sangoma Freepbx (CVE-2026-54675)
CVE-2026-101894 Path Traversal in @xhmikosr/decompress (CVE-2026-101894)
CVE-2026-93348 Code Injection in Unsloth Zoo (CVE-2026-93348)
CVE-2026-12264 Unrestricted File Upload in Zohocorp ManageEngine DDI Central (CVE-2026-12264)
CVE-2026-12268 Vulnerability in ManageEngine DDI Central (CVE-2026-12268)
CVE-2026-12267 Vulnerability in ManageEngine DDI Central (CVE-2026-12267)
CVE-2026-82384 Unsafe Deserialization in Apache (CVE-2026-82384)
CVE-2026-96896 Vulnerability in Malcure Malware Shield — Removal, Repair, Monitor (WordPress plugin) (CVE-2026-96896)
CVE-2026-100843 Unsafe Deserialization in MONAI (CVE-2026-100843)
CVE-2026-100840 Vulnerability in MONAI (CVE-2026-100840)
CVE-2026-88772 KEV [KEV] Buffer Overflow in Citrix ADC (CVE-2026-88772)
CVE-2026-82901 Unrestricted File Upload in Ultra Addons for Contact Form (WordPress plugin) (CVE-2026-82901)
CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature...
CVE-2026-100695 Cross-Site Scripting (XSS) in Adminer (CVE-2026-100695)
CVE-2026-100682 Path Traversal in Budibase Server (CVE-2026-100682)
CVE-2026-100653 Vulnerability in vLLM (CVE-2026-100653)
CVE-2026-100639 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-100639)
CVE-2026-100389 Unrestricted File Upload in GestSup (CVE-2026-100389)
CVE-2026-100372 Path Traversal in ClipBucket (CVE-2026-100372)
CVE-2026-94445 A malicious txtar could escape the intended execution context and force arbitrary writes to the...
CVE-2026-85750 Vulnerability in Piwigo (CVE-2026-85750)
CVE-2026-19804 Code Injection in WordPress (CVE-2026-19804)
CVE-2026-87902 KEV [KEV] Vulnerability in WordPress Core (CVE-2026-87902)
CVE-2026-13249 OS Command Injection in Honeywell PD45 Industrial Printer (CVE-2026-13249)
CVE-2026-13248 Vulnerability in Honeywell PD45 Industrial Printer (CVE-2026-13248)
CVE-2026-61788 Vulnerability in @bytebase/dbhub (CVE-2026-61788)
CVE-2026-97359 Vulnerability in HFS2 (CVE-2026-97359)
CVE-2026-80513 Unsafe Deserialization in wpForo Forum (WordPress plugin) (CVE-2026-80513)
CVE-2026-70125 Vulnerability in Microsoft Outlook (CVE-2026-70125)
CVE-2026-93352 Unrestricted File Upload in Laravel Apache (CVE-2026-93352)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details