Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-88738 Unrestricted File Upload in Jazzware RT1000 Edge webUI (CVE-2026-88738)
CVE-2026-88404 Code Injection in Univer (CVE-2026-88404)
CVE-2026-88405 Code Injection in Univer (CVE-2026-88405)
CVE-2026-67827 Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote...
CVE-2026-61674 Vulnerability in Fluent Bit (CVE-2026-61674)
CVE-2026-94184 A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A...
CVE-2026-88857 Unrestricted File Upload in OrdaSoft (CVE-2026-88857)
CVE-2026-88856 Code Injection in OrdaSoft (CVE-2026-88856)
CVE-2026-90817 An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough...
CVE-2026-94109 Vulnerability in openEQUELLA (CVE-2026-94109)
CVE-2026-94104 Unrestricted File Upload in NivoCart (CVE-2026-94104)
CVE-2026-93993 Vulnerability in Mistral Vibe (CVE-2026-93993)
CVE-2026-4327 Code Injection in Welcomizer (WordPress plugin) (CVE-2026-4327)
CVE-2026-84750 Unrestricted File Upload in WordPress Apache (CVE-2026-84750)
CVE-2026-87909 Vulnerability in WP Photo Album Plus (WordPress plugin) (CVE-2026-87909)
CVE-2026-84434 Unrestricted File Upload in Gravity Forms (WordPress plugin) (CVE-2026-84434)
CVE-2026-93031 Unrestricted File Upload in WordPress (CVE-2026-93031)
CVE-2026-84106 Cross-Site Scripting (XSS) in IBM Guardium Data Protection (CVE-2026-84106)
CVE-2026-84074 Cross-Site Scripting (XSS) in IBM Guardium Data Protection (CVE-2026-84074)
CVE-2025-66455 Unsafe Deserialization in lmdeploy (CVE-2025-66455)
CVE-2026-75031 In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was...
CVE-2025-53837 Vulnerability in org.xwiki.rendering:xwiki-rendering-xml (CVE-2025-53837)
CVE-2026-93685 Information Disclosure in multicluster-observability-addon (CVE-2026-93685)
CVE-2026-77929 Unrestricted File Upload in ClipBucket (CVE-2026-77929)
CVE-2026-93598 Vulnerability in ArcadeDB (CVE-2026-93598)
CVE-2026-84738 Code Injection in AF Companion (WordPress plugin) (CVE-2026-84738)
CVE-2026-15815 Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin...
CVE-2026-93295 Vulnerability in MISP (CVE-2026-93295)
CVE-2026-92980 Unrestricted File Upload in HortusFox-Web (CVE-2026-92980)
CVE-2026-28326 SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details