Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2026-76218 Vulnerability in GitPython (CVE-2026-76218)
CVE-2026-76224 Code Injection in ArcadeDB (CVE-2026-76224)
CVE-2026-66613 Vulnerability in JetEngine (CVE-2026-66613)
CVE-2026-49420 The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the…
CVE-2026-19942 Path Traversal in WordPress (CVE-2026-19942)
CVE-2026-52608 An incorrect access control vulnerability in reportico-web <= 8.1.0 allows an unauthenticated...
CVE-2026-67271 Out-of-Bounds Write in Dell PowerStore SDNAS (CVE-2026-67271)
CVE-2026-75858 Code Injection in deepseek-tui (CVE-2026-75858)
CVE-2026-45117 Code Injection in MyBB (CVE-2026-45117)
CVE-2026-73343 Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.
CVE-2026-32444 Code Injection in Cwicly (CVE-2026-32444)
CVE-2026-63639 Use-After-Free in Valkey (CVE-2026-63639)
CVE-2026-56684 Use-After-Free in Valkey (CVE-2026-56684)
CVE-2026-75827 Code Injection in getgrav/grav (CVE-2026-75827)
CVE-2026-15748 Unrestricted File Upload in Forminator Forms (WordPress plugin) (CVE-2026-15748)
CVE-2025-62593 KEV [KEV] Code Injection in Ray-Project Ray (CVE-2025-62593)
CVE-2026-65640 Unrestricted File Upload in WordPress (CVE-2026-65640)
CVE-2026-65974 Vulnerability in ERPNext (CVE-2026-65974)
CVE-2026-74253 Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input...
CVE-2026-75056 OS Command Injection in JetBrains IntelliJ IDEA (CVE-2026-75056)
CVE-2025-27770 Vulnerability in UpTrain (CVE-2025-27770)
CVE-2025-27772 Vulnerability in UpTrain (CVE-2025-27772)
CVE-2025-27771 Vulnerability in UpTrain (CVE-2025-27771)
CVE-2026-16139 Vulnerability in Progress ShareFile Storage Zones Controller (CVE-2026-16139)
CVE-2026-15218 A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI....
CVE-2026-74997 OS Command Injection in Roundcube Webmail (CVE-2026-74997)
CVE-2026-16098 Unrestricted File Upload in ProSolution WP Client (WordPress plugin) (CVE-2026-16098)
CVE-2026-16099 Unsafe Deserialization in Podlove Podcast Publisher (WordPress plugin) (CVE-2026-16099)
CVE-2026-17581 Code Injection in WordPress (CVE-2026-17581)
CVE-2026-14498 Unrestricted File Upload in Query Wrangler (WordPress plugin) (CVE-2026-14498)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details