Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2026-61524 Unrestricted File Upload in WebsiteBaker CMS (CVE-2026-61524)
CVE-2026-61523 Code Injection in WebsiteBaker CMS (CVE-2026-61523)
CVE-2026-39932 Vulnerability in OpenEMR (CVE-2026-39932)
CVE-2026-69097 Vulnerability in GitPython (CVE-2026-69097)
CVE-2026-16297 Unsafe Deserialization in Clearfy Cache (WordPress plugin) (CVE-2026-16297)
CVE-2026-16250 Unrestricted File Upload in Personal QR Message (WordPress plugin) (CVE-2026-16250)
CVE-2026-16060 Unrestricted File Upload in Insert or Embed Articulate Content into (WordPress plugin) (CVE-2026-16060)
CVE-2026-12872 Unrestricted File Upload in Webinfos (WordPress plugin) (CVE-2026-12872)
CVE-2025-15672 Unsafe Deserialization in ChamaWP (WordPress plugin) (CVE-2025-15672)
CVE-2026-16062 Unsafe Deserialization in Event Booking Manager for WooCommerce (WordPress plugin) (CVE-2026-16062)
CVE-2026-67326 Vulnerability in GitPython (CVE-2026-67326)
CVE-2026-67305 Vulnerability in FreeRDP Windows client (CVE-2026-67305)
CVE-2026-16144 Code Injection in Kali Forms — Contact Form & Drag-and-Drop Builder (WordPress plugin) (CVE-2026-16144)
CVE-2026-15601 Path Traversal in WordPress (CVE-2026-15601)
CVE-2026-18420 Vulnerability in Amazon OpenSearch Dashboards (CVE-2026-18420)
CVE-2026-17566 OS Command Injection in Pgadmin (CVE-2026-17566)
CVE-2026-17347 OS Command Injection in Pgadmin4 (CVE-2026-17347)
CVE-2026-17351 SQL Injection in Pgadmin (CVE-2026-17351)
CVE-2026-16236 Unrestricted File Upload in Realtyna Organic IDX (WordPress plugin) (CVE-2026-16236)
CVE-2026-14483 Unrestricted File Upload in Realtyna Organic IDX plugin + WPL Real Estate (WordPress plugin) (CVE-2026-14483)
CVE-2026-12720 Unsafe Deserialization in Kirki (WordPress plugin) (CVE-2026-12720)
CVE-2026-18157 Vulnerability in yggdrasil-worker-package-manager (CVE-2026-18157)
CVE-2026-67208 Vulnerability in Juggle (CVE-2026-67208)
CVE-2026-67206 Unrestricted File Upload in Wolf CMS (CVE-2026-67206)
CVE-2026-15976 Unsafe Deserialization in SGLang (CVE-2026-15976)
CVE-2026-11536 Unsafe Deserialization in IBM WebSphere Application Server (CVE-2026-11536)
CVE-2026-15971 Vulnerability in SGLang (CVE-2026-15971)
CVE-2026-15969 Unsafe Deserialization in SGLang (CVE-2026-15969)
CVE-2026-68502 Vulnerability in LazyOwn RedTeam/APT Framework (CVE-2026-68502)
CVE-2026-12940 OS Command Injection in Langflow (CVE-2026-12940)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details