Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-79988 The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the...
CVE-2026-79720 Cross-Site Scripting (XSS) in Lutzroeder (CVE-2026-79720)
CVE-2026-79718 Cross-Site Scripting (XSS) in Lutzroeder (CVE-2026-79718)
CVE-2026-79719 Cross-Site Scripting (XSS) in Lutzroeder (CVE-2026-79719)
CVE-2026-81581 Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can...
CVE-2026-77018 Unrestricted File Upload in Workeera (WordPress plugin) (CVE-2026-77018)
CVE-2026-77991 Unrestricted File Upload in Joomla Event (CVE-2026-77991)
CVE-2026-47875 Unsafe Deserialization in Broadcom Spring Batch (CVE-2026-47875)
CVE-2026-47884 Path Traversal in org.springframework:spring-webmvc (CVE-2026-47884)
CVE-2026-47852 Vulnerability in Vmware Onnx (CVE-2026-47852)
CVE-2026-52103 Code Injection in SimpleX Chat (CVE-2026-52103)
CVE-2026-71171 OS Command Injection in Dell Cloud Disaster Recovery (CVE-2026-71171)
CVE-2026-80428 ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel...
CVE-2026-54569 Vulnerability in senaite.core (CVE-2026-54569)
CVE-2026-12717 Vulnerability in Google Cloud BigQuery Data Transfer Service (CVE-2026-12717)
CVE-2026-77532 A malicious actor with access to an adjacent network could exploit a Buffer Overflow...
CVE-2026-18080 Unrestricted File Upload in WordPress (CVE-2026-18080)
CVE-2026-18431 Vulnerability in Avada (WordPress theme) (CVE-2026-18431)
CVE-2021-23758 KEV [KEV] Unsafe Deserialization in Ajax.net professional AjaxNetProfessional (CVE-2021-23758)
CVE-2026-54757 Code Injection in compliance-trestle (CVE-2026-54757)
CVE-2026-75496 Unrestricted File Upload in Webkul QloApps (CVE-2026-75496)
CVE-2026-19912 The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution...
CVE-2026-79774 Vulnerability in Winter CMS (CVE-2026-79774)
CVE-2026-18798 Vulnerability in Openssl (CVE-2026-18798)
CVE-2026-63073 Vulnerability in Openssl (CVE-2026-63073)
CVE-2026-57863 Path Traversal in Crater Invoice (CVE-2026-57863)
CVE-2026-79657 Unsafe Deserialization in nltk (CVE-2026-79657)
CVE-2026-19949 SQL Injection in All-in-One WP Migration and Backup (WordPress plugin) (CVE-2026-19949)
CVE-2026-77136 The extension passes the raw value of a form field configured as "This field contains the name of...
CVE-2026-77138 The extension fails to safely process untrusted client input of an attacker-controlled cookie...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details