Remote Code Execution

⚔️ Attack Types Related 2,905
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-6721 OS Command Injection in IBM Concert (CVE-2026-6721)
CVE-2026-84474 Vulnerability in Red Hat Ansible Automation Platform's automation- controller (CVE-2026-84474)
CVE-2026-71464 LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading...
CVE-2026-18490 Unsafe Deserialization in Ibm Financial Transaction Manager (CVE-2026-18490)
CVE-2026-96560 Unsafe Deserialization in LightLLM (CVE-2026-96560)
CVE-2026-86677 SQL Injection in ZohoCorp ManageEngine Applications Manager (CVE-2026-86677)
CVE-2026-19599 OS Command Injection in ZohoCorp ManageEngine OpManager MSP (CVE-2026-19599)
CVE-2026-12370 Vulnerability in Configlet processing (CVE-2026-12370)
CVE-2026-96443 Vulnerability in Apache (CVE-2026-96443)
CVE-2026-91794 Out-of-Bounds Write in Foxit PDF Editor/Reader (CVE-2026-91794)
CVE-2026-91789 Out-of-Bounds Write in Microsoft Windows (CVE-2026-91789)
CVE-2026-75799 Code Injection in YAHMAN Add-ons (WordPress plugin) (CVE-2026-75799)
CVE-2026-77987 Vulnerability in Github (CVE-2026-77987)
CVE-2026-67615 Vulnerability in openEQUELLA (CVE-2026-67615)
CVE-2026-88418 Cross-Site Request Forgery (CSRF) in CMSimple (CVE-2026-88418)
CVE-2026-28324 SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code...
CVE-2026-28325 SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code...
CVE-2026-85995 Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature…
CVE-2026-43642 Unsafe Deserialization in Softaculous Virtualizor (CVE-2026-43642)
CVE-2026-80156 Path Traversal in Lantronix SLC8000 before firmware (CVE-2026-80156)
CVE-2026-80155 Path Traversal in Lantronix SLC8000 before firmware (CVE-2026-80155)
CVE-2026-24239 Unsafe Deserialization in Nvidia (CVE-2026-24239)
CVE-2026-24267 Unsafe Deserialization in Nvidia (CVE-2026-24267)
CVE-2026-95675 OS Command Injection in D-Link DAP-1360 firmware (CVE-2026-95675)
CVE-2026-74849 OS Command Injection in Zohocorp ManageEngine ADSelfService Plus (CVE-2026-74849)
CVE-2026-25254 Vulnerability in Qualcomm Software Center (CVE-2026-25254)
CVE-2026-15095 Path Traversal in WordPress (CVE-2026-15095)
CVE-2025-1281 Path Traversal in BM Content Builder (WordPress plugin) (CVE-2025-1281)
CVE-2026-91827 Unsafe Deserialization in Ninja Forms (WordPress plugin) (CVE-2026-91827)
CVE-2026-94127 KEV [KEV] Vulnerability in F5 Big Ip Access Policy Manager (CVE-2026-94127)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details