Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,905
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8702 Cross-Site Scripting8062 SQL Injection3878 Path Traversal2049 Privilege Escalation1502 Cross-Site Request Forgery1065 Server-Side Request Forgery855 Authentication Bypass851 Insecure Deserialization737 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-91963 Vulnerability in Freerdp (CVE-2026-91963)
CVE-2026-91932 Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration...
CVE-2026-91931 Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that...
CVE-2026-19407 Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior...
CVE-2026-89308 An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing...
CVE-2026-75983 Privilege Escalation in WordPress (CVE-2026-75983)
CVE-2026-90932 LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core...
CVE-2026-90919 LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's...
CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in...
CVE-2026-90770 Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that...
CVE-2026-90553 vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2...
CVE-2026-85200 Vulnerability in WordPress (CVE-2026-85200)
CVE-2026-78006 Unsafe Deserialization in WordPress (CVE-2026-78006)
CVE-2026-78159 Code Injection in WordPress (CVE-2026-78159)
CVE-2026-78175 Unsafe Deserialization in WordPress (CVE-2026-78175)
CVE-2026-81402 Unrestricted File Upload in WordPress (CVE-2026-81402)
CVE-2026-81090 Cross-Site Request Forgery (CSRF) in WordPress (CVE-2026-81090)
CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until <…
CVE-2026-72710 SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action...
CVE-2026-8778 Unrestricted File Upload in WordPress (CVE-2026-8778)
CVE-2026-89094 Forgejo before 16.0.4 allows remote code execution via a crafted template repository because...
CVE-2026-81048 Command Injection in Dell Thinos (CVE-2026-81048)
CVE-2026-81803 Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.
CVE-2026-88889 Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager...
CVE-2026-18351 Unrestricted File Upload in WordPress (CVE-2026-18351)
CVE-2026-73769 A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an...
CVE-2026-8044 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')...
CVE-2026-87874 A flaw was found in the memcached cache plugin of the community.general Ansible collection....
CVE-2026-67401 A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root...
CVE-2026-26212 Unrestricted File Upload in WordPress (CVE-2026-26212)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details